Sony is only No. 2 in all-time-largest data breach, despite bad security, weak passwords