Is the penalty for hacking too high?

Is the punishment for hacking to high? If you look at the crime itself, what is hacking? The law has trouble because the crimes you can commit using a computer change every day, new things are being developed that can be hacked and there are new ways to access data that might not be not be illegal but still violate laws. The punishments for hacking are very high, with tens of thousands of dollars in fines and up to 20 years in prison. Is that to high for a price for some minor crimes? While because the law is still new, the penalties have changed quite a lot recently. There are other situations that someone hacks a company but does not actually cause any damage but still violates so laws.

Recently a man was convicted to 20 years in prison and several thousand dollars in fines, and the man killed himself. The crime he committed was he hacked a company and stole some information, but the sentence he received was worse then so murders get. So there are so people advocating that the penalties be lower, mainly the prison sentences and an increase of the fines the people have to pay.

There are 2 kinds of hackers, black hats who are hackers that are doing it on their own and hacking into companies for stealing information and money. And there are white hats, that not always hired by the companies but they hack companies to show weaknesses and loopholes they can find and then advise the company how to prevent further hacks and help them close the holes. Some of this kinds of hackers have not been hired by the companies and are just doing it on their own so even though they are not malicious, they can be arrested for this crimes. A handful of the most famous white hat hackers are actually have asperger and do not know what they are doing is necessarily bad and wrong.

There have even been large groups of people who ban together and create hacking “clans”. The most notorious are MOD or masters of destruction, MOB has been stopped by government and the rest have gone underground but a few other groups have taken up in their stead and because they are so powerful they have the ability to bring entire company to their knees, so should this malicious groups be arrested for the same laws that other hackers that are not necessarily bad?