Tech companies have not had to answer to the law for a long time. We are now seeing that tech companies straight up break into each others servers and nobody is charged with any crime for it. I think it is safe to say that crime is legal for rich tech companies.

So who is liable? Nobody. This is a big tech company, to which laws do not apply.