I'm honestly curious, because my reading of US v Auernheimer was that the majority of the penalties were linked with sharing the records obtained. Which stands

I'm honestly curious, because my reading of US v Auernheimer was that the majority of the penalties were linked with sharing the records obtained. Which stands to reason and is in line with my understanding of the CFAA: that circumventing and breaching security is a crime, but the severe penalties kick in when one shares the results of those actions.