Twenty-seven states and Washington, D.C., have filed a lawsuit to block the sale of customers’ DNA and data without their consent by 23andMe after the company declared bankruptcy.