Ashley Madison hack is not only real, it’s worse than we thought

Doesn't reporting stats from this leak imply you have the data or access to it? I was under the impression that it was illegal to have this.