A well-known email hosting provider, allegedly popular among hackers and cybercriminals, has been hacked, with sensitive information on more than a million users ending up for sale on the dark web.