Wikipedia states of ITAR (International Traffic in Arms Regulations):
US persons (including organizations; see legal personality) can face heavy fines if they have, without authorization or the use of exemption, provided foreign persons with access to ITAR-protected defense articles, services or technical data.
Can someone who does not have citizenship or permanent resident status in the US, nor live there, commit a crime in the eyes of the US government by requesting ITAR-restricted data from a company and (due to failures of their data restriction processes) being given it in contravention of ITAR laws?