Hackers have earned $1.7 million so far from trading data stolen from US gov payment portals