Not saying it does not occur in tech in general, but there is a difference in scale between selling the data and abusing it for personal reasons. The examples you provided are exclusively the latter.
The mentioned employee sold access to 4,887 email accounts.
The mentioned employee sold access to 4,887 email accounts.