HipChat breach prompts mass password reset