IF !DoTime then !DoCrime

Regardless of whether this was "easy" to do through tree hopping, URL crafting or any other method, there's absolutely no way this guy would have found any substantial amount of information by accident. Anything after an initial happy accident was surely done with malicious intent to steal data and in the knowledge that this was not something he should be doing.

As for the severity of the sentence, it seems reasonable to me that if he was stealing your personal information you would be likely to be upset about it being abused. I am pretty sure the judge is more addressing the value of the data he took than about the fact that he broke in to a computer system to get it (ie he would treat it just as if he had taken printed files after a break in).