A Russia-based hacking rampage hits US agencies, exposes millions