23andMe tells customers that data breach was victims' responsibility