If you hack somebody and steal their data, that'd probably count. If you've exfiltrated confidential data from your employer, that could count. For a time, exporting strong crypto was illegal; we might see a return to that.