The hacked records, discovered by a Milwaukee-based security firm, include username and password combinations and more than 500 million email addresses.