When your company suffers a data breach, stolen credentials don’t just disappear. Here’s where they go, how criminals profit, and how to protect your business.