IANAL, but in the UK, according to the computer misuse act - yes that would be a criminal offence as the access is unauthorized, regardless of how access was gained. (guessing URL, phising, guessing password etc)

http://en.wikipedia.org/wiki/Computer_Misuse_Act_1990#The_Co...