Hacker claims to have stolen genetic data from millions of 23andMe users and is trying to sell the information online