You're right that I mischaracterized the legal status of the issue - though I think saying that this 'might be' the basis for a civil suit is seriously understa

You're right that I mischaracterized the legal status of the issue - though I think saying that this 'might be' the basis for a civil suit is seriously understating things, given the degree of incompetence demonstrated by AT&T in securing private information. It's also possible that AT&T violated data privacy laws in certain jurisdictions, which might or might not be a criminal matter. I'm not particularly interested in defending Weev, though I have to say that prosecuting someone for accessing data you published on the Internet with no access control does not a good reputation make.