I used to have a collection of downloaded user databases in an encrypted partition in my iPod back when I was in high school.

Some were actually pretty high profile sites (probably top 100 at the time) but I was worried they'd come after me if I reported the vulnerabilities (that was the standard response before bounty programs and such) so I just dumped it and moved on.

I'm sure I'm not the only one that just did it for sport.