eBay hacked, customers must reset passwords