When Machine Unlearning Jeopardizes Privacy