Hackers steal 1.2 billion passwords — four steps to take now