Two plastic surgeon’s studios were hacked by cybercrime group Maze and sensitive data of customers is already available online