Unauthorized access and damages.

I work on a site.
There are 6 Admins.

One member was able to get hold of one of those accounts not just once, where he edited scores, deleted members, he also got hold of one again, by going through the Admins msn accounts.
The second time he deleted all 1007 games, and crashed the site which is now unavailable.

I was wondering if this person could be reported for at least loss of earnings?

He's threatening to do it once more once the site is back up ... -_-

Reported to whom? For what? Who is s/he and what evidence have you? Don't waste law enforcement's time. Simply fix your gaping security holes.

We have emails, and MSN conversation from this person admitting it as well as his ip address which records what he actually did on the site when he had access.

I know this is a simple situation to fix, but as he uses a password hacking software to get our information, we have to change our MSN's just to stop him from getting the passwords.

He's threatening to do it again if we don't give him Admin privileges.
The site itself has not got any security issues, it's the fact he gets the password through the admins emails. Which we all have now changed.

I scared them so they would be put off doing it again, and wondered if any of it was true?

Is it illegal? Of course it is state laws ... the federal laws can be hard to dig up but there's plenty (try the DOJ Cybercrime Site!) ... but it seems you have a small operation, an easy fix, no measurable damages, and probably insufficient evidence. Also your insecure method of distributing passwords probably mutes any real legitimate chance of turning this into a criminal case.

This sounds like someone you know directly or indirectly acting out a grudge. Go ahead and threaten to bring in the law but seriously, I don't think anyone would investigate it. There's too many extremely serious hacking offenses going on to be concerned about.

Agreed, i wouldn't take it up because I am threatening them with insufficient evidence, telling them that it's illegal and they're making us lose money scared 'em to death.

Thanks for the info. =]

Well, it is a crime. It is malicious attack on your property, and if you are of such a mind, you can have a lawyer look over the evidence and see if some communication with the perpetrator is appropriate. However, I would not do anything without a lawyer, because you, yourself, may end up in a legal soup. Legal help would cost several hundreds of dollars, so it is up to you whether or not it is worth it.

Good luck!

Rich