Yes, DDoS attackers can go to jail under the Computer Fraud and Abuse Act which can result in up to 10 years of jail time.