I believe that Shurgard is decided incorrectly on the issue of authorization. I feel that the court should have found that there was still authorization at the time that the emails were sent. For the court to deem the authorization void once the employees sent the emails opens a floodgate of uncertainty with regard to when authorization ends. What if the employee had just used the email to send dirty pictures? Would that have ended the agency? It would be very difficult to figure out when loyalty to the agency had been breached and the standard would be constantly changing. What if the company had a somewhat lenient policy with regard to their secrets and usually gave employees a second chance if caught.
The court should have found that there was still agency and therefore authorization atleast until the employees were notified otherwise or their employment was terminated. I dont believe that this statute was written to target diliberate intentional knowingly unauthorized access to computers such as when viruses and worms are used. I cant imagine that the employees contemplated whether or not their use of the email addresses was authorized or not.
Another issue to look at is that fact that the email addresses can be accessed from other computers not just the ones at the company. What would be the result if the files were sent from personal computers on the Shurgard email accounts. What if they were sent from personal accounts on business computers. Under that scenario it would not have been unauthorized access but the results and damages are clearly the same.