The social media site has known since January that millions of users' passwords were stored in a readable format on its systems.