A published report says Russian hackers have stolen 1.2 billion user names and passwords in a series of Internet heists affecting 420,000 websites.