The hackers say they will leak more than 400,000 files if a ransom isn't paid, in what an expert says is "the worst data breach that I recall seeing in New Zealand".