It does violate the CFAA and probably many other laws, but unless a prosecutor decides to pursue charges nothing will be done.
And just about everyone in the position to prosecute them actively wants this, so this is just another example of laundering the blame.