Does it matter at all how Rekieta got access to Aaron's data? Didn't Aaron admit it was because he had logged into his account on Rekieta's computer? If so, that means that Rekieta was essentially "given" access to Aaron's account.
There could be an argument made that he is under no obligation to sign out of Aaron's account, which essentially means he's got access until the browser clears it's history data, and that any information he received was just looking through what is essentially an open window.
Then again, since he did post private account information on the web in what is more or less an attempt to harass Aaron, and especially if he sent emails from Aaron's account, this will probably put any legal leeway that might have been granted in the trash.