It's wrong if they share it. But then they did not 'steal' the information. They shared it (wrongfully).