I think it's dismissive to jump to that conclusion - they're likely turning a healthy profit by dumping lists of emails, credit card numbers, and zero-day vulnerabilities on the black market.
Specifically - information gained in the Bethesda http://pastebin.com/i5M0LB58 and whitehat http://pastebin.com/MQG0a130 raids has not been released.