Is Computer Tampering a Felony in Arizona? ARS 13-2316

Is Computer Tampering a Felony in Arizona?

Yes — every form of it. Computer tampering under A.R.S. § 13-2316 is Arizona’s hacking statute, and it is broader than most people expect: it reaches classic intrusions, but also employees who exceed their authorized access, ex-partners who log into accounts, online harassment campaigns, and even introducing malware. Classes run from Class 6 up to Class 2 — the same class as manslaughter — when critical infrastructure is involved.

What the Statute Covers

A person commits computer tampering by acting without authority or exceeding authorized use in any of these ways:

• Accessing or altering a computer or network to execute a fraud scheme — Class 3 felony;
• Knowingly altering, damaging, deleting, or destroying data or programs — Class 4 felony;
• Introducing a computer contaminant (malware, ransomware, viruses) — Class 4 felony;
• Recklessly disrupting or denying computer or network services — Class 4 felony;
• — any of those three rises to a Class 2 felony if the target is a critical infrastructure resource;
• Recklessly using a computer in a scheme directed at a person that seriously alarms, torments, threatens, or terrorizes them (cyber-harassment) — Class 5 felony; and
• Two lesser forms, including knowingly obtaining information from a computer without authority — Class 6 felony.

Conviction also carries a mandatory consequence people miss: the court shall order forfeiture of any computer or communication device owned or used exclusively by the defendant in the offense.

“Without Authority” Is the Battleground

Very few Arizona computer tampering defendants are hackers in hoodies. They are employees accused of taking files on the way out the door, ex-spouses who knew the password, business partners in a falling-out, and IT workers whose access was ambiguous. In every one of those cases, the charged conduct turns on whether access was authorized, or whether authorization was exceeded — concepts the statute does not define with precision. Shared passwords, saved logins, accounts created together, and job duties that included access all cut against the State’s theory.

Penalties

First-offense ranges track the class: a Class 3 (fraud-scheme tampering) carries probation up to 8.75 years; a Class 4 up to 3.75 years; a Class 5 up to 2.5 years; a Class 6 up to 2 years — and a Class 2 critical-infrastructure case up to 12.5 years. Federal charges under the Computer Fraud and Abuse Act can parallel any of these. Restitution for claimed data losses and forensic-response costs is often the largest financial exposure in the case.

Defenses

• Authorization — access within granted rights, shared credentials, or genuinely ambiguous scope;
• No knowing or reckless conduct — automation, sync artifacts, and background processes explain many “deletions”;
• Attribution — shared devices, shared networks, and spoofed credentials make “who did it” genuinely contestable;
• The (A)(5) limits — no substantial distress to a reasonable person, or a legitimate purpose for the conduct;
• Valuation and damage — challenging inflated loss claims that drive both the class and restitution.

How Tamou Law Group Defends Computer Tampering Cases

We put our own forensic examiners on the evidence, because the State’s narrative of intentional tampering frequently dissolves into sync artifacts, shared credentials, and ambiguous permissions. The authorization element, the attribution gap, and the inflated damage claims are the three recurring weak points, and many of these cases belong in civil court, not criminal court, which is itself an argument we make.

Related reading: was the search of your phone legal?, can police recover deleted files?, and our Scottsdale white collar crimes lawyer page. Call 623-321-4699, 24/7.