The teen allegedly advertised the stolen data for sale on cybercrime forums.