A cybercriminal is selling a massive database of 91 million Tokopedia users for just $5,000, and other attackers are already cracking and sharing the exposed passwords online.