An anti-money laundering group has uncovered the ways in which stolen personal data is being sold on the dark web