Tinder, Citymapper and Candycrush are some of the thousands of apps linked to the apparent breach.