Black Shadow hacking group releases client data of the popular ‘Atraf’ website, including of at least 4 HIV-positive users; cyberattack also hit websites of public transport companies Dan and Kavim, a children’s museum, public radio’s online blog