I guess criminal conspiracy might be the wrong word. There is no prohibition on sharing hacked data as far as I can tell. There is “unauthorized access device” like having CC or SSN numbers but that’s only if you have an intent to defraud. Maybe they could argue stolen property? There is potentially copyright infringement in some cases but this is a government database so that doesn’t apply here.