“No data was stolen, there was no fraud, and nothing was done without authorization.”