A massive leak of 16 billion login credentials went largely unnoticed. Here’s what happened, why it matters, and the five things you must do now to stay secure.