Hackers Pop 6,000 Merchant Sites