NBC: Lawsuit says Clorox hackers got passwords simply by asking