"Imagine getting access to a lead-generation platform featuring hundreds of thousands of compromised companies around the world with active vulnerabilities that you can convert into customers."
I've seen and dealt with a couple of these types of companies. It's a pretty sleazy tactic, and it's low skill/effort from a technical point of view as well.
"Hudson Rock acquires and purchases compromised data directly from top-tier threat actors operating in closed circle hacking groups. What sets our data apart is its quality in providing high accessibility to hacker groups looking for potential targets, and the speed in which we make it available to clients compared to other threat intelligence companies. Our operational knowhow, and our boots-on-the-ground approach to cybercrime originates from the IDF's 8200 Cybercrime division, and its efforts to thwart nation-state adversaries and professional threat actors."
https://cavalier.hudsonrock.com/docs
This would imply that they are financially engaging with and supporting cyber criminals.
Or are you using a word that describes something different just because it evokes negative emotions?
* Checkpoint
* Palo Alto Networks
* Waze
* Wiz
* Cybereason
Does your theory hold up? no, but why not generalize
As they usually say.. I'd check whoever is running Hudson Rock's hard drive.