Perhaps it is an example of prosecutorial overreach, and I wonder if the judges' ruling is, in part, intended to make a stand on that issue.
FWIW (and IANAL), I would have preferred to see this person charged only for the unauthorized data access, with his purpose taken into consideration (negatively) in sentencing.
