I'm wondering if it is legal to use a copy of a leaked database like the leaked Adobe database containing email addresses, encrypted passwords and password hints.
I can imagine it won't be legal to use such data for illegal activities like sending spam or trying to login in other services with that credentials. But, what if it's for informational purposes?
In other words: Can I save and index any leaked database that is published on the internet? And let users search inside it to check if their info was leaked?
One example of a site that is already doing this is: https://haveibeenpwned.com