Lets put this into perspective. He didnt commit fraud with the info and he didnt steal from the punters whose identity was revealed. He didnt participate in identity theft. Whilst spammers are pond life this guy was at the bottom end of the theft scale and 8 years is a bit steep. The real rogues are the guys who had a million peoples data entrusted to them but didnt keep it secret.