Content from a biometric database containing personal identity details of 1.1 billion Indian citizens may be up for sale, a report suggests.