After nearly 3B personal records leak online, Florida data broker confirms it was ransacked by cyber-thieves