Hacker leaks 40 million user records from popular Wishbone app