In the US, both organisations and individuals are protected by the Constitution, specifically by the Fourth Amendment, A government agency would not be permitted to access the information released (as described int the article) without a warrant. It is not clear why a non-government organization, although not constrained by the Fourth Amendment, should be given a pass when it does so. That is not, of course, entirely applicable to someone who receives and releases the information without actually committing CFAA violations.
These constitutional and legal protections apply to all, including criminals and criminal organizations, and even those who might be seen as "leading the crusade against constitutional rights ." The presumption that some individuals and organizations are entitled to less consideration than other under the Constitution and laws has no place in the US, and I suspect that, with allowance for constitutional differences, it also has no place in the UK.