The Russian hackers responsible for stealing 1.2 billion internet credentials have been described as Russian men in their 20s. Knowing Russian guys in their 20s, I suspect their motivation was not financial. More along the lines of "can we do it" and "let's get them all to change their passwords". And obviously we should. I think they believe they're doing us a service. I'd be much more concerned had it been a government (lke China's PLA hackers), or known criminal organization.