Forgive me if I'm being naive, but what is legally dubious about purchasing employee lists off of former (or current) employees? I'm in an industry where the "employee list" is published regularly (game development, employees listed via product credits) hence my curiosity.