Hold Security is standing by its fee to alert companies if they have been breached by the Russian gang who recently stole 1.2 billion usernames and passwords.