DNA testing company 23andMe didn’t have adequate data protections and ignored warning signs ahead of a massive data breach almost two years ago, an investigation by Canada’s privacy commissioner found.