U.S. security provider Imperva found on the black market sales pitch on Thursday and published details of the incident on Friday. 16 sites were available for sale for $ 33 and $ 499, depending on how important site or widely used. The hacker also sells its database of personal data was stolen, sites $ 20 per thousand records, “he said. The attacks probably started to these sites using a common Web-based attack called SQL injection, Bar-Yosef said. In one case, a hacker sells about 300,000 people who were on the site.
Source: https://thehackernews.com/2011/01/you-have-500-you-can-buy-hack-for-site.html

