Nearly one billion people in China had their personal data leaked, and it's been online for more than a year