US courts have been very liberal in their interpretation of the CFAA. I strongly disagree with it, and I believe it is downright dangerous, but this is the current legal environment in the US. Perhaps he should move to Germany. Stuff like this probably wouldn't happen there either:

http://news.yahoo.com/security-experts-blast-ipad-hackers-ch...