I don't know Indian laws. But this wikipedia page [1] gives a list of types of computer fraud in the US under the CFAA: Types of computer fraud include: * [.

I don't know Indian laws. But this wikipedia page [1] gives a list of types of computer fraud in the US under the CFAA: Types of computer fraud include: * [...] * Accessing unauthorized computers * [...] He accessed their computers to access purchase information of other people (e.g. his friend) and business data. I guess making it public, thereby damaging the companies reputation and potentially getting sued by their lawyers is one way to find out, whether he was "unauthorized" to do so. [1] https://en.wikipedia.org/wiki/Computer_fraud https://en.wikipedia.org/wiki/Computer_fraud