On a technicality because of where he was charged, not because of the law. I don't think he should have ever been convicted under the CFAA, but he was.

From Wiki on his case:

> While the judges did not address the substantive question on the legality of the site access, they were skeptical of the original conviction, noting that no circumvention of passwords had occurred and that only publicly accessible information was obtained.

It's a pity it didn't make it to full review on appeal to get a solid ruling on this.