Japan Travel Bureau data leak may affect 8 million