The vast amount of personal data for sale online is an “increasingly powerful” tool for intelligence gathering by US and foreign spying agencies but also represents a privacy risk to ordinary people, according to a newly declassified US intelligence report.