Actually, 3-5 years sounds pretty reasonable. If you think about it, you should be glad that she didn't get a crazy "send a message" punishment of 20 years or life in prison. She'll never work in that capacity again, so it's not like there's a need to separate her from society for the protection of society.
A better question to address is how a single rogue person could do so much damage. This is institutional failure. Just going after this woman misses the big problem.
A better question to address is how a single rogue person could do so much damage. This is institutional failure. Just going after this woman misses the big problem.