Or, session cookies. They don’t need special privilege to access, and if you grab all of someone’s cookies, you can probably get some valid session cookies for logged in accounts just by checking for some common domains in one/by keyword.
From there, it would be trivial to get into email, social media, and other accounts to do other things with.
Big “if” though, and that would be contingent on the fact that the data is desirable enough that other people are willing and able to host it long-term, even before being able to find a country like that, and set up a torrent. I’ve a few torrents that are dead now, for example, because people weren’t that interested in keeping a copy of what they pointed to/the tracker no longer works.
You’d still need to share the torrent to spread it anyhow, and that runs into the DMCA issue all over again. The pirate bay only hosted torrents and magnet links, but it still got shut down for piracy, way back when. “facilitating pervasive online infringement [of copyright]” is something that can get you shut down, as Limewire found out.