An estimated tens of thousands of loans and mortgages have had private data compromised online, according to a new report.