Researcher releases 10 million usernames and passwords