Cyber criminals are setting up web shops that sell stolen data for a knock-down price, say security experts.