This is far too low. A fine large enough to destroy the company (as was effectively done to Purdue) would have been the only palatable outcome. And even more importantly, legal repercussions for all their employees who were personally responsible for this. All this settlement achieves is 'a cost of doing business', as they say. It's not punishment or deterrence. McKinsey and other companies like them will do similar…
I'm serious, this guides decisions with Attorney Generals.