A website that sold/publish personal info mostly e-mail/username and password combos.

they never sold any information, they sold access to view leaked databases with information

the difference is that selling the information itself is technically illegal, but since these databases were leaked online you're only providing access to view them in a format which isn't necessarily illegal but governments can force their way to shutting them down. next best thing is for WLI or their next counterpart to just crop up a domain in Luxembourg.

That seems like a distinction without a difference.