"ethically dubious", i consider it criminal; though they probably got some (lawyer written) fine print to say it is not so.
I remember how big a deal the News International phone hacking scandal was; this actually seems much worse.
I'm having a hard time imagining what they did is OK, but I'm probably wrong.