That seems harsh. Just hang him upside down at the low tide line for a couple of days...
Seriously - identity theft penalties don't seem to be high enough anywhere. I'm not usually an advocate of long jail sentences, but this kind of thing doesn't seem to be sufficiently punished. Perhaps a recommendation for four years could turn into eight or ten?
Biting the hand that feeds IT
