With so much data apparently exposed via back-end servers, we shouldn’t be surprised if there’s a new wave of thefts and extortion attempts