Seven Hong Kong VPN companies have reportedly leaked sensitive user data despite claiming they don't keep logs.