Mozilla says hacker stole security-sensitive info after compromising its bug-tracking system