That depends. If they bypassed the Windows logon in any way to get to the data, that can be construed as hacking per the CFAA. Since that data is normally protected by a Windows logon in all legitimate cases, it can be construed as hacking.
Not to mention to purchase of a stolen hard hard drive.