Exactly.
He never gave you permission to actually use the account, what made you assume that you were allowed to play with it? That IS considered hacking, whatever way you put it. You're not to judge what he was going to do with the account or not.
Leave it alone or give it back.