Facebook is reportedly buying back stolen user credentials such as email address and passwords, in order to protect the data. The social network has made these dubious purchase off the dark web to ensure that they are not reused to attack their site. The process raises the question whether or not it is ethical for companies to buy stolen data from third parties in order to secure its systems.