Where does negligence come into play?

In criminal hacking law that explicitly requires intent, or a civil lawsuit about damages?

I honestly don't know, but my guess would be the latter.

I think there’s a strong argument that it was hard to foresee the consequences since it was all new. This won’t be true if those incidents continue happening tho.