An appeals court in the United States overturned Friday the conviction of a self-described “security research” hacker for breaking into the AT&T online network to reveal a security flaw.

Andrew Auernheimer, known online as “weev,” was sentenced to just over three years in prison last year for breaching the AT&T network and revealing email addresses of more than 120,000 Apple iPad users to the online news site Gawker....