PORTLAND, Ore. — Twenty-seven states and the District of Columbia on Monday filed a lawsuit in bankruptcy court seeking to block the sale of personal genetic data by 23andMe without customer consent.