The threat actors claim to have exploited Coin Cloud's database and retrieved some 70,000 customer selfies as well as personal information from over 300,000 users