Where does negligence come into play?

In criminal hacking law that explicitly requires intent, or a civil lawsuit about damages?

I honestly don't know, but my guess would be the latter.