Indeed, and while it is the original title, the original title itself is highly misleading. The actual figure is 14K and supposedly all of them reused passwords on other, compromised, services.
Then the media ran away with the 6M figure because the shared profiles of anyone in the Family DNA thing were also available to those 14K users.
I'd love to pretend that HN can see right through that, but if you read any of the threads about it they fell for it hook-line-and-sinker. You wouldn't even know from those threads that 23AndMe wasn't even itself compromised nor DNA for "6M" people weren't stolen.