Using stolen data is a crime already (though I don't know all the details of a complex subject that undoubtedly needs more work to fix).