I don't know about the US in particular, but most countries have laws against intrusion into computer systems, referred as "automatized data processing" or the like. For example in France, you'd risk up to 3 years in prison and a 300,000€ fine for that kind of actions.
