Hackers reportedly selling leaked terrorism watchlist