Thousands of women who carry mutations in the genes BRCA1 and BRCA2 and joined ‘private’ Facebook groups recently learned that their groups were vulnerable to a Chrome plug-in that allowed marketers to discover group members’ names and other private health information.