Hacker put 200M users’ private information up for grabs