Stolen financial files then get sold on the Dark Web, researchers say.