Thousands of Mega logins dumped online, exposing user files