No one was deprived of anything. He obtained a list of owners' email addresses -- oh the humanity!
If he tried to extort them or cause financial harm, charge him with that. To say his access was criminal simply because he typed things into the box that they didn't expect and it spit out information is ludicrous.