Researchers discovered 'a young Russian hacker' bragging in an online forum that he had acquired and was ready to give away 1.17 billion stolen credential records. Even after deduping, it still amounts to 272.3 million stolen accounts.