Their data is being sold online by the same gang who this week claimed to have hacked Ticketmaster.