A Russian man convicted of hacking into U.S. businesses to steal credit card data has been sentenced to 27 years in prison and ordered to pay nearly $170 million in restitution.