The statement that is NOT true of white hat hackers is:
They are breaking the law and are at risk of legal repercussions.
White hat hackers, also known as ethical hackers, operate with permission and often work to identify and fix security vulnerabilities, which means they are not breaking the law.