A Russian crime ring has stolen 1.2 billion username and password combinations and more than 500 million email addresses.