That would potentially rise to the level of recklessness but it is still not intent.

(To be clear, negligence and recklessness can still be criminal, but it is a matter of law what combination of act and mental state is criminal, and so the main question to me is whether there is currently any law in the US that would cover this case, given that the most obvious one, the CFAA, doesn't currently include recklessness or negligence)

To me it seems obvious that there should be some update to the law in this regard, but I'm not sure exactly what form is reasonable. (Arguably the CFAA should already have a stronger requirement for harm given how it's sometimes used to attack researchers reporting a problem. In most of the cases the labs are reporting it's not obvious there is notable harm).