Hacker News Reader

what i want to know is where you can find this information. Also, is it even legal for the website owner to hold stolen information.

They could get hashed copies of the information and find out whether a given phone number was present without needing to retain the original leak.