&gt; is why this guy [not the hacker] is getting 25 years.<p>No, he is not getting 25 years. He is being sentenced for a crime whose statutory maximum punishment is 25 years, for an offense which, under the circumstances put forward by the prosecutors, has a base guideline sentence of about 5 years (which is also what prosecutors have said they will seek in sentencing.)<p>The defense is likely to, in sentencing, challenge the prosecution position on damages, which may result in the guideline range being substantially lower. There is, basically, zero chance of a sentence anywhere close to 25 years here.