Among the 2 million credit card numbers downloaded and then sold on the black market through Seleznev’s operation in recent years, many were obtained by cyberattacks at small businesses including bakeries and dozens of West Cost pizza parlors from Los Angeles to Seattle.