Within Legal Limits

When Looking Becomes Legally More Serious

Legal exposure often increases when unauthorised access progresses from observation to interference.

On this page

  • Access without alteration
  • Impairment and disruption allegations
  • Why intent and recklessness matter
Preview for When Looking Becomes Legally More Serious

Introduction

In cases associated with curiosity-driven hacking, including the Gary McKinnon affair, one of the most important legal distinctions is the difference between merely viewing information and taking actions that damage, alter or disrupt computer systems. A person may claim that they entered a network only to look for files, documents or evidence. However, once an intrusion causes systems to fail, data to be altered, accounts to be deleted, or operations to be interrupted, the legal exposure typically becomes much more serious. The shift is not merely about motive; it is about what the intruder actually did and the consequences that followed. In both UK and US computer-crime law, unauthorised access can be an offence on its own, but allegations of impairment or damage often trigger more severe charges and penalties. [Legislation.gov.uk+2Crown Prosecution Service]legislation.gov.ukComputer Misuse Act 1990An Act to make provision for securing computer material against unauthorised access or modification; and for conn…

Damage Threshold illustration 1

Access Without Alteration

The basic legal issue in many hacking cases is unauthorised access. If a person gains entry to a computer system, account or network without permission, prosecutors do not need to prove that files were destroyed or that services were interrupted in order to allege an offence. Under the UK’s Computer Misuse Act, unauthorised access itself forms the foundation of criminal liability. [Legislation.gov.uk+2Crown Prosecution Service]legislation.gov.ukComputer Misuse Act 1990An Act to make provision for securing computer material against unauthorised access or modification; and for conn…

This matters in UFO-related hacking narratives because the common defence is often framed as curiosity rather than sabotage. McKinnon repeatedly stated that he was searching for evidence relating to UFOs, anti-gravity technology and alleged government secrecy rather than attempting financial theft or espionage. Yet even if an intruder only reads files, examines directories or searches internal databases, the law may still treat the conduct as unlawful if authorisation was absent. [Wikipedia]WikipediaGary Mc KinnonGary Mc Kinnon

From a legal perspective, the distinction between “I only looked” and “I broke in” is often less significant than non-specialists assume. The act of crossing the authorisation boundary is already the key threshold. The question then becomes whether additional conduct escalated the seriousness of the case. [Crown Prosecution Service]cps.gov.ukcomputer misuse actCrown Prosecution ServiceComputer Misuse Act5 Feb 2020 — Section 1: Unauthorised access to computer material · Actus Reus · Mens rea · Se…

When Looking Becomes Legally More Serious

The escalation point usually appears when access turns into interference.

Several actions commonly move a case beyond simple viewing:

  • Deleting files or user accounts.
  • Modifying system settings.
  • Installing remote-access software or hacking tools.
  • Disabling security controls.
  • Altering logs or records.
  • Causing computers or networks to become unavailable.
  • Interfering with operational systems relied upon by organisations. [Crown Prosecution Service+2Crown Prosecution Service]cps.gov.ukCrown Prosecution Service CybercrimeCrown Prosecution ServiceCybercrime - prosecution guidance1 May 2018 — Section 3 CMA 1990 - unauthorised acts with intent to impair the o…Published: May 2018

In legal terms, these actions are often treated differently because they affect the integrity or availability of systems rather than merely exposing information. Courts and prosecutors generally regard disruption as creating a wider harm: administrators must investigate incidents, restore systems, verify data integrity and ensure that critical services remain operational. Even where the original motive was curiosity, the practical consequences can resemble those produced by more obviously malicious attacks. [Crown Prosecution Service]cps.gov.ukCrown Prosecution Service CybercrimeCrown Prosecution ServiceCybercrime - prosecution guidance1 May 2018 — Section 3 CMA 1990 - unauthorised acts with intent to impair the o…Published: May 2018

Damage Threshold illustration 2

Impairment and Disruption Allegations

The McKinnon case illustrates why the distinction became so important. Public discussion often focused on his UFO-related claims, but the legal allegations centred heavily on disruption and damage rather than simple observation.

According to US indictments and government statements, McKinnon was accused of accessing dozens of military and NASA systems and of actions that went beyond viewing information. Prosecutors alleged that he damaged computers, deleted critical files, copied account information and caused operational disruption across military networks. One indictment alleged unauthorised access and damage involving computers used for national defence and security. [Department of Justice]justice.govDepartment of JusticeLondon, England Hacker Indicted Under Computer Fraud…One count charges McKinnon with accessing and damaging witho…

US authorities further alleged that critical files were deleted, resulting in the shutdown of the US Army Military District of Washington network, while other allegations concerned disruption affecting naval systems. Government accounts claimed substantial remediation costs and operational consequences. [GOV.UK+2Wikipedia]GOV.UKlatest on gary mckinnon case4 Nov 2010 — Mr McKinnon is accused by US authorities of the unauthorised access of 97 government computers concerned with national defen…

Whether every allegation could have been proven at trial was never tested because the case became dominated by extradition proceedings rather than a full criminal trial. Nevertheless, the charging documents demonstrate the legal mechanism clearly: the seriousness of the prosecution did not arise solely from unauthorised entry. It arose from allegations that systems were impaired and operations disrupted after entry had been achieved. [Department of Justice+2Department of Justice]justice.govDepartment of JusticeLondon, England Hacker Indicted Under Computer Fraud…One count charges McKinnon with accessing and damaging witho…

Why Intent and Recklessness Matter

A common misunderstanding is that prosecutors must prove a desire to cause harm. In practice, many computer misuse laws also consider recklessness.

Under modern UK guidance, an offence can arise where a person performs unauthorised acts intending to impair a computer’s operation or being reckless as to whether impairment will occur. In other words, someone need not set out to crash a network if they knowingly engage in conduct that creates an obvious risk of doing so. [Crown Prosecution Service]cps.gov.ukCrown Prosecution Service CybercrimeCrown Prosecution ServiceCybercrime - prosecution guidance1 May 2018 — Section 3 CMA 1990 - unauthorised acts with intent to impair the o…Published: May 2018

This is particularly relevant in curiosity-driven intrusions. An individual exploring unfamiliar systems may believe they are only investigating. Yet actions such as removing files, changing settings, installing software or experimenting with administrative privileges can have unintended consequences. If those consequences interfere with system operation, the legal analysis often shifts from mere access to impairment. [Crown Prosecution Service+2Crown Prosecution Service]cps.gov.ukCrown Prosecution Service CybercrimeCrown Prosecution ServiceCybercrime - prosecution guidance1 May 2018 — Section 3 CMA 1990 - unauthorised acts with intent to impair the o…Published: May 2018

The law therefore focuses not only on what the person hoped to achieve but also on what they actually did and the risks they knowingly created.

Damage Threshold illustration 3

The Damage Threshold in Practice

The practical lesson from the McKinnon case and similar prosecutions is that legal exposure tends to increase in stages.

At the first stage, a person may face allegations based on unauthorised access alone. At the second stage, copying sensitive information, obtaining credentials or facilitating further offences can increase the seriousness of the conduct. At the highest levels are allegations that systems were impaired, data was altered, networks were disabled or critical operations were disrupted. Each step moves the case further away from a narrative of passive observation and closer to one of active interference. [Crown Prosecution Service+2Crown Prosecution Service]cps.gov.ukcomputer misuse actCrown Prosecution ServiceComputer Misuse Act5 Feb 2020 — Section 1: Unauthorised access to computer material · Actus Reus · Mens rea · Se…

For readers examining UFO-motivated hacking claims, this distinction is crucial. The legal system generally does not assess a case solely by asking why someone entered a computer. It also asks what happened after entry was obtained. The transition from viewing files to causing damage is often the point at which a curiosity-driven intrusion becomes legally far more serious. [Crown Prosecution Service+2Department of Justice]cps.gov.ukcomputer misuse actCrown Prosecution ServiceComputer Misuse Act5 Feb 2020 — Section 1: Unauthorised access to computer material · Actus Reus · Mens rea · Se…

Amazon book picks

Further Reading

Books and field guides related to When Looking Becomes Legally More Serious. Use these as the next step if you want deeper reading beyond the article.

eBay marketplace picks

Marketplace Samples

Example marketplace items related to this page. Use the search link to explore similar finds on eBay.

Using USA

Endnotes

  1. Source: legislation.gov.uk
    Link: https://www.legislation.gov.uk/ukpga/1990/18/section/1
    Source snippet

    Computer Misuse Act 1990An Act to make provision for securing computer material against unauthorised access or modification; and for conn...

  2. Source: cps.gov.uk
    Title: computer misuse act
    Link: https://www.cps.gov.uk/prosecution-guidance/computer-misuse-act
    Source snippet

    Crown Prosecution ServiceComputer Misuse Act5 Feb 2020 — Section 1: Unauthorised access to computer material · Actus Reus · Mens rea · Se...

  3. Source: cps.gov.uk
    Title: Crown Prosecution Service Cybercrime
    Link: https://www.cps.gov.uk/prosecution-guidance/cybercrime-prosecution-guidance
    Source snippet

    Crown Prosecution ServiceCybercrime - prosecution guidance1 May 2018 — Section 3 CMA 1990 - unauthorised acts with intent to impair the o...

    Published: May 2018

  4. Source: GOV.UK
    Link: https://www.gov.uk/government/consultations/review-of-the-computer-misuse-act-1990/review-of-the-computer-misuse-act-1990-consultation-and-response-to-call-for-information-accessible
    Source snippet

    of the Computer Misuse Act 1990: consultation and...14 Nov 2023 — The section 1 CMA offence of unauthorised access to computer material...

  5. Source: Wikipedia
    Title: Gary [Mc Kinnon]({{ ‘mc-kinnon/’ | relative_url }})
    Link: https://en.wikipedia.org/wiki/Gary_McKinnon

  6. Source: assets.publishing.service.gov.uk
    Title: Factsheet Computer Misuse Act
    Link: https://assets.publishing.service.gov.uk/media/5a819c6de5274a2e87dbe8fd/Factsheet_-Computer_Misuse-_Act.pdf
    Source snippet

    Fact sheet: Part 2: Computer misuseThe 1990 Act, which applies UK-wide, makes unauthorised access to, or modification of, computer...

  7. Source: justice.gov
    Link: https://www.justice.gov/archive/criminal/cybercrime/press-releases/2002/mckinnonIndict.htm
    Source snippet

    Department of JusticeLondon, England Hacker Indicted Under Computer Fraud...One count charges McKinnon with accessing and damaging witho...

  8. Source: justice.gov
    Title: Department of Justice British National Charged with Hacking Into N.J
    Link: https://www.justice.gov/archive/criminal/cybercrime/press-releases/2002/mckinnonIndict2.htm
    Source snippet

    seven-count Virginia Indictment charges McKinnon for intrusions into 92 computer systems belonging to the U.S. Army, Navy, A...

  9. Source: GOV.UK
    Title: latest on gary mckinnon case
    Link: https://www.gov.uk/government/news/latest-on-gary-mckinnon-case
    Source snippet

    4 Nov 2010 — Mr McKinnon is accused by US authorities of the unauthorised access of 97 government computers concerned with national defen...

  10. Source: Wikipedia
    Title: Gary (The Bear episode)
    Link: https://en.wikipedia.org/wiki/Gary_%28The_Bear_episode%29
    Source snippet

    Gary (The Bear episode)"Gary" is a special episode of the American comedy-drama series The Bear, written by and starring cast members...

  11. Source: Wikipedia
    Link: https://en.wikipedia.org/wiki/Computer
    Source snippet

    ComputerA computer is a machine that can be programmed to automatically carry out sequences of arithmetic or logical operations (compu...

  12. Source: justice.gov
    Link: https://www.justice.gov/archive/usao/nj/Press/files/pdffiles/Older/edva_mckinnon_indictment.pdf
    Source snippet

    IndictmentDefendant GARY MCKINNON was an unemployed computer system administrator living in London, England. h. The above introductory al...

  13. Source: criminal.laws.com
    Title: gary mckinnon
    Link: https://criminal.laws.com/gary-mckinnon
    Source snippet

    McKinnon - LAWS.com - Criminal22 Dec 2019 — He came to the attention of law enforcement authorities when he hacked into 97 computers betw...

  14. Source: southeastcyber.police.uk
    Title: computer misuse act
    Link: https://southeastcyber.police.uk/computer-misuse-act/
    Source snippet

    The Computer Misuse Act 1990Section 2 of the Computer Misuse Act makes it illegal to gain unauthorised access to a computer with the inte...

  15. Source: sites.google.com
    Title: computer misuse act
    Link: https://sites.google.com/rgc.aberdeen.sch.uk/rgc-highercomputing/computer-systems/security-risks-and-precautions/computer-misuse-act
    Source snippet

    This law makes it an offence to: Gain unauthorised access to computer...Read more...

  16. Source: britannica.com
    Title: Learn more in this article about modern digital
    Link: https://www.britannica.com/technology/computer
    Source snippet

    Computer | Definition, History, Operating Systems, & Facts28 Apr 2026 — A computer is a programmable device for processing, storing, and...

Additional References

  1. Source: stuartmillersolicitors.co.uk
    Link: https://www.stuartmillersolicitors.co.uk/computer-misuse-act-offences/
    Source snippet

    A Guide to Computer Misuse Act OffencesUnauthorised access to computer material (Section 1 CMA): In this offence, the defendant is allege...

  2. Source: standard.co.uk
    Link: https://www.standard.co.uk/hp/front/crucial-evidence-goes-missing-in-hacker-case-6841040.html
    Source snippet

    Crucial evidence goes missing in hacker caseImportant evidence in the case of Gary McKinnon, the north London geek who hacked into the Pe...

  3. Source: scan.co.uk
    Link: https://www.scan.co.uk/
    Source snippet

    SCAN UK | PC components and online computer shopScan is the UK's leading supplier of computer hardware and PC components. Customise PCs f...

  4. Source: ikandp.co.uk
    Link: https://www.ikandp.co.uk/computer-misuse-act-offences
    Source snippet

    mputer Misuse Act OffencesIn short, the Act makes the following acts illegal: Unauthorised access to computer material;. Unauthorised a...

  5. Source: laptopsdirect.co.uk
    Link: https://www.laptopsdirect.co.uk/st/acer-veriton-n4620g-series
    Source snippet

    PCs | Desktop Computer DealsShop PCs for work, school & streaming. Find all-in-ones and towers from ASUS, Lenovo, HP and more. Ready for...

  6. Source: lexisnexis.com
    Title: computer hacking misuse under the computer misuse act 1990
    Link: https://www.lexisnexis.com/en-gb/legal/guidance/computer-hacking-misuse-under-the-computer-misuse-act-1990
    Source snippet

    Computer Misuse Act 1990 (UK): unauthorised access...21 May 2026 — The Computer Misuse Act 1990 (CMA 1990) was primarily passed to tackl...

    Published: May 2026

  7. Source: pure.port.ac.uk
    Title: port.ac.uk Insider unauthorised use of authorised access
    Link: https://pure.port.ac.uk/ws/portalfiles/portal/4748932/Insider_unauthorised_use_of_authorised_access_final_copy_post_acceptance_1.pdf
    Source snippet

    offence of unauthorised access and the computer misuse offences in general are included in the CMA 1990, which has been amended by the Po...

  8. Source: cyberupcampaign.com
    Title: cyberup view on the dojs new guidance for prosecutors
    Link: https://www.cyberupcampaign.com/news/cyberup-view-on-the-dojs-new-guidance-for-prosecutors
    Source snippet

    CyberUp view on the DoJ's new guidance for prosecutors6 Jun 2022 — The CFAA is the US equivalent to the UK's Computer Misuse Act (CMA) –...

  9. Source: abc.net.au
    Title: uk man accused of hacking pentagon fronts court
    Link: https://www.abc.net.au/news/2005-06-09/uk-man-accused-of-hacking-pentagon-fronts-court/1588590
    Source snippet

    8 June 2005 — Gary Mckinnon was arrested on Tuesday on charges of computer fraud issued in November 2002 by US prosecutors claiming he il...

    Published: June 2005

  10. Source: pinsentmasons.com
    Title: alleged uk hacker will fight extradition to us
    Link: https://www.pinsentmasons.com/out-law/news/alleged-uk-hacker-will-fight-extradition-to-us
    Source snippet

    14 Nov 2002 — US prosecutors on Tuesday indicted Gary McKinnon, 36, of Hornsey, north London, for allegedly hacking into the computer sys...

Topic Tree

Follow this branch

Parent topic

Legal Limits When Curiosity Becomes a Computer Crime

Related pages 5