In the UAE, hacking into a website—whether it belongs to an individual, a business, or any commercial entity—is a criminal offense. This is explicitly addressed under Federal Decree Law No. 34 of 2021 on Combatting Rumors and Cybercrimes.

Specifically, Article 2 of the law criminalizes any unauthorized access to:

1. Websites
2. Information systems
3. Information networks
4. Information technology equipment

What Does This Mean in Practice?

Consider a scenario where someone attempts to take control of a company’s website by altering its login credentials. On the surface, this may appear to be a mere technical disruption. In reality, the consequences can be deeply damaging for the business.

Unauthorized access may allow the intruder to:

• Redirect the website to a competitor or fraudulent page
• Deface the homepage with false or defamatory messages
• Steal sensitive customer data
• Delete product listings
• Disable payment systems

These actions are not only harmful to the business—they are also criminal under UAE law.

Criminal Penalties for Hacking

The law imposes strict penalties even when no visible harm occurs. For basic hacking, the punishment includes:

• Imprisonment, and/or
• A fine ranging from AED 100,000 to AED 300,000

Where damage occurs—such as data leaks, disruption of service, or deletion of information—the penalties increase significantly:

• Minimum of 6 months’ imprisonment, and/or
• A fine between AED 150,000 and AED 500,000

If the intent behind the hack involves data theft or illegal commercial gain, the consequences are even more severe:

• Minimum of 1 year in prison, and/or
• A fine ranging from AED 200,000 to AED 500,000

Why It Matters for Businesses

A company’s website serves as its digital storefront. Any compromise—whether through defacement, unauthorized access, or data theft—can have long-term consequences, including:

• Loss of customer trust
• Operational disruption
• Civil liability from affected clients
• Reputational harm that may take years to repair

It is also important to note that even attempted unauthorized access can result in criminal prosecution.

Accomplice in Website Hacking

In the UAE, the penalties for website hacking extend beyond the individual carrying out the hack. If you assist, facilitate, or encourage the act in any way, you may be held criminally liable as an accomplice.

Although the UAE Cybercrime Law (Federal Decree Law No. 34 of 2021) does not contain a standalone article on accomplices, the UAE Penal Code applies. And its provisions are clear.

Who Is Considered an Accomplice?

Article 46 of the Penal Code defines an “accomplice by causation.” This includes any person who:

1. Instigates someone to commit the crime
2. Agrees with another person to commit the crime
3. Provides tools, access, or other forms of assistance
4. Aids in the preparation, facilitation, or execution of the act

These provisions apply even if the accomplice does not directly interact with the hacker, or acts through intermediaries.

• Article 47 goes further, stating that any individual found at the scene of the crime with the intent to commit it may be treated as a direct perpetrator.
• Article 48 confirms that accomplices are punished with the same penalty as the principal offender.

Application to Website Hacking

Examples of accomplice conduct in the context of website hacking include:

• Sharing administrative login credentials with someone intending to breach the site
• Purchasing or supplying hacking tools or software
• Coordinating with a hacker to disable a competitor’s website
• Encouraging or knowingly facilitating unauthorized access to a business site

Thus, even if you never personally engage in the hacking activity, providing support or enabling the act can result in criminal charges.

Conclusion

Under UAE law, hacking a business website—whether for sabotage, manipulation, or financial gain—is a serious criminal offense. The law treats digital infrastructure with the same gravity as physical property, and violations carry significant legal consequences. Furthermore, cybercrime liability is not limited to the hacker. Anyone who contributes—through preparation, assistance, or agreement—may be prosecuted under the same legal framework.

The message is clear: whether directly or indirectly involved, participating in website hacking—by action or agreement—exposes individuals to the full force of the UAE’s criminal justice system.