US Attorney Nick Brown said in a statement that he was “very disappointed” with the sentencing decision.
“This is not what justice looks like,” he said.
“Her cybercrimes created anxiety for millions of people who are justifiably concerned about their private information.
This conduct deserves a more significant sanction.”
She was acquitted on charges of aggravated identity theft and access equipment fraud.
Capital One agreed last year to pay $190 million to settle a class-action lawsuit filed by customers.
A hearing is scheduled for Dec. 1 to determine the amount of restitution Thompson must pay to her victims.
