My understanding is that 23andme have to inform users whose data has been accessed.
I tested with that Site, but apart from a message asking me to change my password, (I think everyone on there got that) I haven’t had a message saying that my account has been accessed.
They’ve now installed 2 step verification, but possibly too late for those affected.
Romilly.