 Terrified shoppers hid behind mannequins, inside cardboard boxes, in storage rooms, in ventilation shafts and in the parking lot underneath parked cars during the attack, many hiding for hours before help arrived