Adding bite to anti-hacking provisions of the Homeland Security Act, the
U.S. Sentencing Commission proposed stiffer penalties for some
cybercrimes, with even minor first-time offenders facing up to five years
in prison.
The commission has established guidelines for substantially harsher
punishment if attacks disrupt national infrastructure. For example, if an
attacker disrupts critical infrastructure operation, the severity of
punishment increases by six levels. That could mean an additional 10 to 15
years in prison, says commission spokesman Michael Courlander.
The changes adjust sentencing guidelines to reflect the Homeland Security
Act's definition of protected computers, which includes those of
airports or agencies charged with overseeing infrastructure, such as
public power systems.
Courlander says the amendments, part of a package that includes tougher
penalties for white-collar crimes, such as violations of the
Sarbanes-Oxley Act, have been presented to Congress. Lawmakers may pass
legislation to alter the guidelines, otherwise they'll take effect Nov. 1.
While they don't bind judges, guidelines help ensure equal treatment of
offenders, Courlander says.
http://www.ussc.gov/2003guid/2003amendments.pdf