How a teenage Spanish hacker exposed the data of half a million people, built a cybercrime “startup,” and forced us to confront the fragility of our digital identity.