The CFAA[1][2] is an arcane and ancient piece of legislation that could use an overhaul, especially with some of the vague language it contains. A person would definitely want to make sure they are authorized prior to touching a computer or even data that may not have authorization for.
Unauthorized use of a computer is the easiest felony to commit accidentally it would seem. Although in this case I don’t think that’s a legitimate argument to be made. This person or persons knew they were committing crimes.
I’m not defending the hacker either, the quote at the end of the article rings true.
[1] https://www.justice.gov/jm/jm-9-48000-computer-fraud
[2] https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act