Criminal gangs have acquired login details for more than 200,000 websites.