Klaviyo bug exposed user passwords to third-party advertisers — Trace