It sounds like they are being alleged of lying and not identifying themselves as having been affiliated with either a PAC or a campaign. By doing that, that's breaking the law.
Additionally, the CEO has basically admitted - under hidden camera - that they are fine with blackmail and lying. Is blackmail and lying technically illegal? I'm not sure. But if you lie and blackmail as part of a political campaign, but do not let people know you are a political campaign, you have broken the law.
I haven’t been reading all the latest CA coverage, but from what I’ve seen from the Guardian’s and Observer’s latest deep dive, there’s an issue of violating UK data privacy laws, since CA is alleged to have been involved in Brexit related campaigns. In these stories, it’s not alleged that Trump’s campaign did anything illegal.
Additionally, the CEO has basically admitted - under hidden camera - that they are fine with blackmail and lying. Is blackmail and lying technically illegal? I'm not sure. But if you lie and blackmail as part of a political campaign, but do not let people know you are a political campaign, you have broken the law.