New York attorney general orders stalkerware maker to notify hacked victims