And you'd be correct. Also a white hat is someone who is usually paid by an org to pen test them https://en.wikipedia.org/wiki/White_hat_(computer_security).

If, outside of what they normally apply their hacking abilities to they are participating in this, they are all grey hats on this blessed day