Chris Correa, the guy who illegally accessed the Astros computers was sentenced today to four years in prison.
Given how things like this usually work, I expect him to not actually see any time behind bars. However, some articles I have read about the incident have been speculating as to whether or not the Cardinals organization will be punished in any way by MLB.
Four years might seem harsh for a non-violent crime, but given the potential harm inflicted on the finances and livelihoods of any number of employees of the Astros, including the non-wealthy ones (the administrative assistants, clerical staff, cubicle-dwellers, et cetera) that an electronic security breach represents, I'd say he got off easy.
I think it will be very interesting to see how MLB handles their investigation, which they intend to conduct now that the legal investigation has been resolved.