I'd argue that there have been numerous cases of illicit behavior coming out long after the fact, and that any number of factors could involve a victim being he

I'd argue that there have been numerous cases of illicit behavior coming out long after the fact, and that any number of factors could involve a victim being hesitant to report an incident of any specific individual, but even putting that aside, there's still the matter of the website itself. Did they have permission to use the data in this way, or were there terms that disallowed it being used for something like this? Did the students consent to their data being included in this database, and were they properly informed about what uses would and would not be allowed with that data? Did the actual content of the website alongside the data encourage any illicit behavior or lie about how it was obtained? Some of these might not fall on the side of illegality, but the details about what exactly this data is and where it came from is a bit vague (at least in the initial question; I didn't read through every response, so it's possible some later replies might shed light on this). Without knowing what jurisdiction the university is at, if it's public or private, or who at the university was involved with compiling and publishing the data, it seems plausible that there _might_ be something worth investigating from a legal perspective, and I feel like that would necessarily include looking at the actions of the students who made the website.