Sales of hacked personal data are booming in Russia as the penalties are rarely heavy.