There are recordings of GG kind of "coordinating" actions of the hacker group right in the middle of the process of extracting private messages. Hacker would ask GG's opinion about what to do next: 1. expand the attack 2. stop and assess what they've gotten so far. Then GG clearly advise them to continue to extract more data. So state attorneys now think this attitude "crossed some lines" with crime to which GG is an accomplice.