Last summer a gang of Russian hackers was caught amassing the largest cache of stolen user names and passwords ever discovered—1.2 billion in all. Alex Holden found them.