Millions of Germans have had their passwords and usernames for websites stolen, the country’s Federal Office for Online Security (BSI) revealed on Tuesday.