The statement that is NOT true of white hat hackers is:
They are breaking the law and are at risk of legal repercussions.
White hat hackers operate within the law, typically with the permission of the organizations they are assisting, to identify and fix security vulnerabilities, whereas black hat hackers operate illegally.