While I'm not familiar with this exact case I'd bet on it being covered by the computer fraud and abuse act. It gives law enforcement a lot of latitude to charge you for misuse of a computer system and has criminal penalties.