Do the terms of access to your company's website contain provisions as to what may be accessed and for what purposes? Do you, for example, point out that domain names and e-mail addresses are terms of art and therefore protected under copyright legislation? Do you say that, as a result, harvesting that data, and other information that may be subject to data protection, is illegal? Do you say that anyone who accesses your website intending to breach the terms of access is unauthorised and that unauthorised access is a criminal offence?
Meet Raj Yadav. He wants you to pay him to do all of those things. If you use him, or his company, then you are conspiring to commit those offences and, even though he's apparently in a jurisdiction where he might be difficult to reach, the chances are you are not. Now: where did your latest mailing list data come from?