million user number leak