Sephen Watt, the 25-year-old man who has admitted to providing the "sniffer" program used to hijack the credit card numbers associated with the TJX breach, has been sentenced to 2 years in prison and 3 years of supervised release. In addition, he will have to pay over $170 million in restitution.
Watt was not the leader of the attack that was perpetrated against TJX. That man, Albert Gonzalez, is awaiting his sentence, which could be more than 17 years in prison. Gonzalez and Watt, however, were known friends. The code that Watt created was found stored on a server leased by Gonzalez. The server contained 16.3 million stolen card numbers with another 27.5 million found on an alternate server.
Do you think that Watt received a fair sentencing for his role in one of history's largest data breaches? Do you think that the fines / sentences associated with data breaches are adequate?