If the person/people who did this just wanted to expose security flaws, releasing a DB filled with innocent people's personal information is really over the top.