Over 180m users’ passwords, login credentials stolen in massive data breach, says national cyber security body