> This culminated in the perpetrators carrying out a physical theft, by using stolen credentials to enter "a secure building" at Microsoft's Redmond headquarters and exiting with publicly unreleased prototypes of the Xbox One codenamed "Durango". Group members say they were driven by a strong curiosity about Microsoft's then-unreleased Xbox One console and associated software.

I don’t know, this seems a lot more than ‘hacking’.

18 to 24 months seems about right for that IMO. Typically I am horrified at US sentencing but this doesn’t seem terrible.