Can you get arrested for attacking and successfully getting into a website but doing nothing (sql inj.)?

Dit it once, now i am just wondering if i can get arrested for that. I changed nothing and i was behind a proxy.