Whether the breach meets a criminal threshold depends on establishing specific legal elements, Vanessa Teague told ABC Afternoon Briefing.

Teague noted that "not all access to data that wasn't intended to be shared is necessarily a crime." She said the government would need to establish particular legal grounds before any criminal action could be taken against the company involved.