Hackers are selling sensitive NIO customer data online after the EV maker staunchly denied paying a bitcoin ransom worth millions