A security researcher found the email addresses and encrypted passwords of more than 92 million users of the genealogy site on a private server outside the company.
DNA from a relative of the suspect submitted to the site GEDmatch gave investigators just enough information to identify him, but the process raises privacy concerns.
Big ad campaigns and celebrity involvement have helped increase public interest in genetic genealogy, but helping consumers understand their DNA ancestry testing results remains difficult.