How about starting with the solid facts, that what was unearthed is justified to be unearthed?
>Would it still be journalism, if they hacked the database and didn't find evidence.
We could just say no -- or, if they did find evidence, yes.
This keeps the risk of violating the law, but makes it OK if you indeed unearth something beneficial.
You know, as if we can make rational value judgements given the end result, and not give everyone a free pass, or condemn everyone from the start.