I do not practice law but to me the AI hacking looks like mens rea. Negligence or recklessness suffice.

It goes beyond negligence here, because Anthropic employees have stated on the record that they are making and deploying products which put people at risk. That is knowing and potentially willful, which would be the highest level of mens rea in the US.

If there is no mens rea there is still civil prosecution.