Comment by rank0

I’m not arguing against compensation and other dissuasive/retributive punishment - I did call it a misdeed. Suitable compensation and punishment are absolutely appropriate.

But yes, I am arguing that four years of prison time (there’s also three years of supervised release - so seven years of court oversight total) is disproportionate punishment, and probably any prison time at all for this act. Prison makes the most sense for violent criminals.

I am fine with lots of other compensatory and punitive consequences, including the criminal conviction itself which should not be underestimated as a public record visible in background checks, at least some kinds of orders restricting future activities with computers and/or his former employer for a suitable duration, plus whatever monetary consequences are deemed appropriate.

I don't buy this equivalence of financial damage to a person with financial damage to a business.

If I had a business its finances would be separate from my personal finance using limited liability, so even if someone destroyed 100% of its value, it would only be no return on investment for me - sad and bad but totally not equivalent to losing all my personal money.