Already knew what was up after ECHLON broke (sure it's illegal if we do it, but not illegal if we pay somebody else to do it).
All the more reason to be vehemently against third-party doctrine (really, look up the case. The justification was just bogus across the board).
By their logic, there can never be the crime of identity theft since that information was freely shared originally (remember the crime/responsibility is against you, not the database that was hacked).