A hacker claiming to have stolen personal data from a billion Chinese citizens is now selling the information online, which experts say, if true, would be one of the biggest data breaches in history.