I don&#x27;t think the argument is that they shouldn&#x27;t be prosecuted for hacking the CIA, as much as that the CIA should <i>also</i> be prosecuted for having such shit security on important data.<p>Personally I don&#x27;t think drafting a new law for that is a good idea, but I can see how it could fall under gross negligence.