39, I think it would depend on the case. I wouldn't think think if it would be unless you made special eforts to distribute the files. Distributing them could likely be viewed as continueing the crime. An example in Turkey someone found an exposed 6 mb or so sized Excel file from the family and social policies ministry which contained huge PII, including full addresses, disability percentage, birth place/date, ID numbers, and currently resided city. Someone posted this on a group of more than a thousand members, and multiple people, including myself downloaded the file to check if they were included, and what information was accurate, since it was a dump from about 4 years back from that time. Now that person who decided to let everyone know about this could've gotten in trouble, both by assisting in the crime, and giving people access to the data.
A learning experience is one of those things that say, "You know that thing you just did? Don't do that."