> Serving prison time for notifying people of a serious privacy breach doesn't seem to be a balanced approach. Except his crime wasn't "notifying people of a p

> Serving prison time for notifying people of a serious privacy breach doesn't seem to be a balanced approach. Except his crime wasn't "notifying people of a privacy breach". It was breaching that privacy. There was absolutely no reason whatsoever for him to actually scrape the personal information of 114k people.