After oil giant Shell hit by Clop ransomware gang, workers’ visas dumped online as part of extortion attempt