content: Probably at the state level or in other countries depending on where the impersonated users live. I don't think there is a federal criminal law directly on point in the United States. Maybe unauthorized access of a computer. Any commoner impersonating spez would be prosecuted for doing the same thing to him, but things never seem to work work the other way around when the perp is a CEO.