This is textbook violation of the CFAA which explicitly prohibits exceeding authorized access on protected computers. The shop was authorized to fix hardware, NOT access personal files. Federal offense with penalties up to 10 years depending on circumstances