2 years is less than I’d expect. I remember an 18 year old kid got 1.5 years for creating a variant of the Blaster worm (not even the original), and I don’t think he even profited from it? This guy is a fully grown adult, created an illegal business that performed 200,000 DDOS attacks, likely made millions and caused immense amounts of damage, and … just a 33% longer sentence?
Although, maybe “hacking” type convictions are getting lighter over time?