Exposure for Illegal Content Posted by a Hacked Cloud Account
Start a free AI-assisted chat and connect with an experienced California attorney, with no obligation.
Reviewed & verified by A. Jason Velez, Esq.*
Managing Attorney, 1LAW · Last reviewed September 10, 2025
Legal Inquiry
Consumer Legal Issue
I had a MEGA.nz account, a file sharing cloud based site, that I believed was hacked into in order to post illegal content on my account without my knowledge. I logged in one day to see my account got banned for "a gross violation of policy", and after reading forums on the internet, I learned that any IP used to log into the account that was banned would be forwarded to authorities. So, I believe my IP has been reported to the authorities for posted illegal content, that I knew nothing about and did not do.
How should I proceed? I'm not sure if my IP has been reported, if authorities are after me, or anything. All I know has been based off reading reddit threads and other forums on people who have had similar experiences.
Attorney Answer
If someone else broke into your account and posted that content without your knowledge, you are the victim of unauthorized computer access under California and federal law rather than the person who committed the underlying offense — criminal liability generally requires proof that you knew about and intended the unlawful conduct.
Pen. Code § 20 provides that "in every crime or public offense there must exist a union, or joint operation of act and intent, or criminal negligence." As a general principle, that means the prosecution has to prove a culpable mental state, not merely that content appeared on an account or an IP address associated with your name. It is a general principle rather than an automatic shield, though: the knowledge element that actually protects you is the one written into the specific offense charged, and those elements vary from offense to offense.
Pen. Code § 502(c), California's Comprehensive Computer Data Access and Fraud Act, makes it a public offense to knowingly access and, without permission, alter, damage, delete, destroy, or otherwise use data, a computer, a computer system, or a computer network. That language is aimed at the person who broke into your account, not at you as the account holder. The same statute also gives the owner of the data or system a civil action against the intruder, including for compensatory damages and attorney's fees. 18 U.S.C. § 1030, the federal Computer Fraud and Abuse Act, likewise reaches someone who intentionally accesses a computer without authorization or exceeds authorized access — again, the intruder rather than you.
What you can do
1. Preserve everything that could show unauthorized access: login history, unfamiliar devices or locations in the account activity log, password-reset messages you did not request, and the notice you received about the ban.
2. Change the password on this and any linked accounts and enable two-factor authentication, which also creates a dated record of when you responded.
3. Report the suspected unauthorized access to the cloud storage service's support or abuse team in writing and request whatever access logs it will provide, and consider filing a report with the FBI's Internet Crime Complaint Center documenting the suspected compromise.
4. If you are contacted by law enforcement, do not discuss the account or the content without a criminal defense attorney present, even as an innocent account holder.
5. Consult a California criminal defense attorney now rather than waiting to see whether you are contacted — documentation of a compromise assembled early is far more persuasive than an explanation offered after the fact.
*Attorney review is supported by AI-assisted drafting and legal research algorithms. Use of this Chat does not create an attorney-client relationship.
By using this service you agree to our Terms of Use and our Privacy Policy.
Courts & Legal Aid in California
- File or look up a case through the California Courts.
- Get free civil legal help from LawHelpCA.
- Use the LSC — Find Legal Aid to find a local legal-aid office by ZIP code.
- Use the LawHelp.org to browse free legal information and self-help resources.
- Use the ABA Lawyer Referral Directory to get matched with a local attorney through your state bar.
Frequently Asked Questions
Can someone be held criminally responsible for content posted to their account by a hacker?
Generally, the prosecution must prove the mental state the particular offense requires. An account compromised and misused without the owner's knowledge undercuts that element, though it does not automatically eliminate it, and outcomes turn heavily on the evidence of who actually accessed the account.
What does California's computer crime law cover?
California's Comprehensive Computer Data Access and Fraud Act makes it a public offense to knowingly access a computer, system, or network without permission and alter, damage, delete, destroy, or otherwise use data on it. It is directed at the unauthorized intruder, not at the legitimate account holder whose account was compromised.
Does the owner of a hacked account have any civil recourse?
Yes. California's computer crime statute provides a civil action for the owner or lessee of the computer or data who suffers damage or loss, including compensatory damages and attorney's fees, separate from any criminal case that may result.
