There is a big difference in submitting an example that provokes a bug, and publishing that example.
If an audio player crashes when opening a file with the latest Miley Cyrus hit, then that specific file is useful to reproduce the bug, but it doesn't mean that it can be redistributed further.
The same is with any personally identifiable information - if you have obtained a list of people names/emails/adresses, it doesn't automatically mean that it's okay for you to publish that list.
If an audio player crashes when opening a file with the latest Miley Cyrus hit, then that specific file is useful to reproduce the bug, but it doesn't mean that it can be redistributed further.
The same is with any personally identifiable information - if you have obtained a list of people names/emails/adresses, it doesn't automatically mean that it's okay for you to publish that list.