The database obtained by the cybercriminal is also believed to contain 10 million national identity documents, more than three million international IDs and 579,000 medical records.