It was his decision and he conspired with his employees to do it for profit. The statutory maximum IIRC is around $250k per work, on the criminal enforcement side. If the rights holders can show actual damages greater than that they can sue civilly for those damages plus some fixed amount per work.