exactly its criminal and she could sue whomever civilly for what they did ... damages were incurred most def ... under the CFAA like u telnet into someones machine and just leave through an open port u go to prison or get in some of trouble but it usually doesnt happen unless someone makes a beef or a sysadmin catches somebody fckin around being stupid ... the mfker that ddosed amazon when they went down for like 20 minutes got hard prison time bc in that short time they lost alot of money like hundreds of millions of dollars and thats why he got caught