Security firm identifies hacker behind Collection 1 leak, as Collection 2-5 become public