It's not unusual for intent to play part in legal framing of an issue. I'm not very fond of the "cybercrime" angle, as it kind of lets them off the hook if they're able to prove a lack of intent. Meanwhile what we actually see is negligence.