The New York Times struck fear into Internet users everywhere yesterday with its report that Russian hackers had gotten hold of a staggering 1.2 billion username and password combinations. But is the threat exaggerated? At Forbes , Kashmir Hill finds it a little fishy that Hold Security, the Wisconsin security…