User names and passwords of 20 million visitors to an unidentified dating site have been hacked and offered for sale on a website, according to a posting by the thief on an online forum used by cybercriminals.