Over 400 million individual reports were taken after a grown-up web site had been hacked