NBC News: Lawsuit says Clorox hackers got passwords simply by asking