Technically? If they wanted to be really a pain they could probably hit you with the Computer Fraud and Abuse Act (CFAA). That said, that act is like using a nuke to kill a spider, so it'd never actually happen.