Hackers have stolen close to 2 million usernames and passwords over several platforms in a massive attack.