Millions of passwords, email addresses exposed in breach