No, I exploited a vulnerability in a common server software and gained access to hundreds of servers. Most of these servers had payment related data on them and

No, I exploited a vulnerability in a common server software and gained access to hundreds of servers. Most of these servers had payment related data on them and I was originally charged with ~6,000 counts of identity fraud despite me never actually using the credentials because all of the server data was exfiltrated when I attacked them. I was dumb in many ways and made my attacks overt after a while in an effort to "troll" the server operators. My case went on for many years as my legal team challenged the details of the attack and if it really qualified as how I was charged. The "four corners of the indictment" as it's often called. My legal team was actually very ready to go to trial and beat almost every charge leaving a jury even less likely to convict me on any of the remaining charges, but as most people involved will tell you, it's not worth the potential risk of a X year sentence if convicted when you have a readily available plea offer for a year or less available. I ended up taking a plea offer for the minimum sentence of 366 days ("a year and a day") instead of the potential offer I could have had for less time for a few months. The reason I took the "year and a day" offer instead is because when doing less than a year you may have to do the entire time in county facilities which are very dangerous.