23andMe's data breach: cyberattack was missed for months