LastPass owner GoTo shares more bad news about November's security breach