Bankrupt 23andMe sued for attempting to sell customer DNA data. States take legal action to protect privacy.