Yeah right. People downloading and seeding this are doing nothing wrong. If you want to do something useful you could try notifying account holders.
As usual the rest of the world is not a place within the US. It's a shame some people keep overlooking that.
You should consider the argument you'd make that downloading, possessing, and publishing (if seeding) US government employee credentials doesn't violate the Computer Fraud and Abuse Act.
Copyright violations are one thing. The US government has unending resources. And they've had no problems whatsoever extraditing people from countries all over the world (including Canada and Germany) for computer crimes: https://www.judiciary.senate.gov/imo/media/doc/2-4-14%20Rama...