It's interesting that the article admits they weren't meant to have access to the instance, that makes them unauthorised users. Meaning the users would have be

It's interesting that the article admits they weren't meant to have access to the instance, that makes them unauthorised users. Meaning the users would have been in violation of the computer abuse act.