Not proportionate at all!
The police have an obligation not to do these things - the punishment in this case should be the same as what a civilian who hacked into the system and did the same would face. 20 years? 30? A civilian certainly would not get mere community service. This is an outrage. Government employees and police should be faced with MUCH more severe penalties rather than the obligatory scot-free package. In the first place, part of the supposed qualification involves specifically knowing these things must not be done.