Insurance is regulated so maybe it's different, but plenty of companies rely on illegally obtained data. Websites like haveibeenpwned.com and identity theft pro

Insurance is regulated so maybe it's different, but plenty of companies rely on illegally obtained data. Websites like haveibeenpwned.com and identity theft protection services couldn't exist without hacked/stolen information. I guess the distinction is that they didn't commission it.