Aaron Swartz
I can't see how what they did is any different to the actions of Aaron Swartz, so they should at least face the same charges (which according to the gospel of Wikipedia are "Federal prosecutors later charged him with two counts of wire fraud and eleven violations of the Computer Fraud and Abuse Act, carrying a cumulative maximum penalty of $1 million in fines, 35 years in prison, asset forfeiture, restitution, and supervised release."