Researchers haven't been able to identify the database owners and warn that any determined cyber-actor wouldn't miss such a large prize.