Andrew Auernheimer was convicted on Tuesday of hacking into AT&T servers and stealing the email addresses and other personal data of about 120,000 iPad users.

Reuters reported today that Auernheimer was convicted by a New Jersey jury of one count of conspiracy to access the servers without permission, as well as one count of identity theft.

The defendant faces a maximum five years in prison and $250,000 fine on each count.

A co-defendant, Daniel Spitler, plead guilty to the same charges and awaits sentencing.

Using a script called an account slurper, Auernheimer and Spitler were able to harvest at least 100,000 iPad users' data through matching email addresses with credit card identifiers. However, after the hack, AT&T removed the feature which allowed email addresses to be obtained.

Tor Ekeland, a lawyer for Auernheimer, said his client was free on bail, and planned to appeal the verdict.