it's a test of law more than penetration
clearly, the contracted pentest-testers did their work.
the arresting officer has issue with the authority that authorised the pentesting.
thats between the police and the law makers to decide.
the duo are vindicated. i wouldn't be surprised if they sued for loss of earnings and defamation of charater!