More than 470,000 users of hacking website Nulled had their account details, including e-mail addresses and private messages, leaked.