As an aside, it is sometimes misleading to think of the actions of others in terms of what financial gain they may derive from their activities. Some people simply like to humilate others; I'm thinking of those people who broadcast private mails, etc.
But if you do think this way, you're not alone. I once read a very learnèd report (book-length) on all aspects of data that stated that if you could make it impossible (or very difficult) for a hacker or data-intruder to make money from breaking into a system, you had solved your security problems.
