Why is the insurance companies' use of this data illegal? Unless you can show discrimination against protected groups, not sure how this is illegal.
Protected class has nothing to do with it.
Not even Ebay/Craigslist has managed to keep itself immune from liability of vendors selling stolen items.
Stolen property is a little bit different, there are laws that explicitly prohibit possession or dealing in property known to be stolen.