It's just a fundamental disconnect then, I guess. You and I have a very different understanding of how this "crime" was carried out. He was charged for connect

It's just a fundamental disconnect then, I guess. You and I have a very different understanding of how this "crime" was carried out. He was charged for connecting to a database with credentials that he was already connecting to before with the application. I could argue that he already had access to the other data because the connection allowed it. So, that begs the question: what did he actually "break" into and how is it different than connecting to the database via the app on the same PC? Would you even be able to tell the difference as a sysadmin looking at logs?