One of the biggest stories of the year was the leak of 16 billion passwords — credentials now being used in ongoing hack attacks. Why you must act, and act now.