More that 21 million unique passwords exposed in massive email breach, security researcher says