After reading about the actions he took (depositing employees 401k contributions to his account, setting up fake workstations, etc) I'm surprised it was only 7 years.

The workers paid their own H1B fees which should have been a red flag to them.