In this latest hack, the attacker is selling user information with the promise to delete their copy of the information after payment is received