Well, to be fair, sharing the exposed data to the public is a pretty jerk thing to do, so I could understand wanting him punished for it. He’s lucky with his sentence, though; 41 months, while disproportionate to the crime, is still better than he could’ve gotten.