All these companies, like 23andme, Ancestry.com, MyHeritage.com (an Israeli company, btw)… are the same….and no matter how careful you, personally, are about guarding your information, there always seems to be at least one or two relatives, in every family, that are naive enough to get their DNA tested and splat everything they know about their family tree on every site. It doesn’t take a rocket scientist to do a little research and begin putting bloodlines together, if they were that interested. If you’ve ever given blood, that data is kept, if you had to have any surgery or hospitalization during Covid, you would have been required to have a PCR test, whether you liked it or not, and they could easily have gotten your DNA. Just how long have they really been collecting it? Do we actually know?