Hacker News Reader

That’s why he waited two years to say he did it which just so happens to be the CFAA statute of limitations.

IANAL, but as far as I can tell that's only for civil actions (and it runs from the date that the damages are discovered, not necessarily the time of the offense).

For criminal charges, I believe you'd use the default 5 year statute of limitations for noncapitcal federal crimes (18 U.S.C. § 3282)

But the company can't force the state to pursue criminal action whereas it can sue in a civil court any time it wants.

This was my first thought on the "silly prank" line.

well, Slack is the one having the last laugh, since they get their hands on a lot of "sensitive business data".