The statement that is not true of white hat hackers is:
They are breaking the law and are at risk of legal repercussions.
White hat hackers operate within the bounds of the law and are typically authorized to perform security testing. They aim to improve security systems and help organizations identify and fix vulnerabilities, rather than exploiting them for malicious purposes like black hat hackers do.