Russian hackers have stolen 1.2bn usernames and passwords in a series of internet heists affecting 420,000 websites — in what is likely to be the biggest data breach ever recorded.