The biggest challenge for the gang of Russian hackers said to have amassed 1.2 billion sets of user names and passwords wasn’t actually stealing them.