And can you cite some sort of law this person may have broken? He/she may be a jerk, but that doesn’t make him/her a criminal.
Not a criminal, if the story is as it seems to me. Somebody who had legit access to the private part of the site compromised the privacy -- for example, maybe they downloaded the pics to a computer that someone untrusted had access to, or any of scores of other non-criminal acts that compromise privacy. Most computer users are dreadfully uninformed about privacy, and let's not even mention knowledge of actual security...
So it's most likely a breach of privacy, so maybe there's a civil suit, but not a criminal one, unless they actually stole something or broke into the computer.
Same as if you had a roommate or boarder who took pictures inside your house and published them publicly. Breach of privacy, but not a criminal act.