The BBC, British Airways and Boots are among a growing number of companies targeted by a Russia-linked payroll data hack.