Actually, there's loads of laws like this! I'd argue that if a user fetches the unencrypted passwords of users from a website that they shouldn't be punished a

Actually, there's loads of laws like this! I'd argue that if a user fetches the unencrypted passwords of users from a website that they shouldn't be punished at all because merely obtaining such information isn't harmful to anyone until it is used (in a nefarious way). If I download a huge list of credit card/account details that someone accidentally exposed on their website have I committed a crime? Certainly not! If I use those account details to commit fraud (or similar crimes) then it's a problem. Aside: If someone is able to pull unencrypted passwords from any company's database the real crime there is the fact that the passwords were stored unencrypted in the first place!