Thousands of employees in the US Department of the Interior are using accounts that are easily hacked