Consumers have to spend hours of their time — and, sometimes, their own money — when they find out their driver’s license, Facebook “likes” or Social Security number have been exposed to hackers. But those who sell them are making only petty cash