Google+ bug gave outsiders potential access to private data from 2015 to mid-2018; no disclosure made amid fear of blowback and no evidence of misuse - WSJ