So the authorities should charge him with harrassment, privacy invasion, extortion, copyright infringement (of the photo(s)) whatever is applicable for the things that are described in that article (or anything else) that he has done.

Do not sentence him to 41months for the fact that AT&T breached its customers privacy and Weev let the press know or for accessing unprotected URLs.