Valve wanted to punish him for crimes he commited. HL2 was a big deal.

As for the magnitude of what Valve was seeking? Among other things, they were probably scared; not every hacker is a friendly, innocent curious kid working alone. They should have taken his word for it? Hah, since when is it a good idea to trust criminals?