If the pen test was not authorised by nerve.com, it's illegal. Simple.
Not a member of The Register? Create a new account here.
Remember me on this computer? Post anonymously?