Tomas Foltyn, security writer at ESET discusses the leak, which apparently has yet to be plugged, exposes a range of very specific data about users