A public, non-password-protected database revealed 184 million account details in a silent leak that could fuel major phishing campaigns.