A hacker stole 7,200 passwords, causing a major dark web hosting provider and a third of the dark web to go offline. Now he’s selling them.