They can't sue him, they wouldn't have a leg to stand on.
Why not? I've been clicking around various US laws and have yet to see any mention about a login screen or "Go away, private!" messages being required before it counts as unauthorized access:
http://www.irongeek.com/i.php?page=computerlaws/state-hackin...