In a shocking turn of events, a teenager from Massachusetts has admitted to being behind one of the biggest hacks in the history of the US education sector. Matthew D. Lane, a 19-year-old, pleaded guilty to federal charges related to hacking and extorting a major education technology company. The breach exposed sensitive data of over 70 million students and educators, sparking concerns about cybersecurity in the digital academic world.
The Scale of the Breach:
According to reports, Lane used stolen login credentials to breach the network of a software provider serving schools across the US and Canada. Prosecutors claim he accessed personal details of more than 60 million students and 10 million teachers, including names, addresses, phone numbers, Social Security numbers, health records, and academic grades. This breach has caused significant financial costs and fear among parents, teachers, and officials, highlighting the serious implications of cyber extortion.
PowerSchool Named as the Likely Target:
Although not officially named in court, the details of the case closely align with a data breach confirmed by PowerSchool earlier this year. The company acknowledged a breach in their systems between August and September 2024, affecting schools across North America. PowerSchool is a widely used platform for managing student data, grades, attendance, and health records. Prosecutors allege that Lane, along with an accomplice, demanded a ransom of approximately $2.85 million in cryptocurrency from the company.
Official Responses and Legal Proceedings:
PowerSchool confirmed paying the ransom to ensure the deletion of stolen data but did not disclose the exact amount. However, several school districts have reported receiving fresh threats indicating that the data was not completely erased. Lane also faces separate charges for hacking and attempting to extort a US telecommunications provider, though the company’s name remains undisclosed in the plea agreement. PowerSchool’s spokesperson, Beth Keebler, acknowledged the case but directed inquiries to the US Attorney’s Office in Massachusetts, which declined to identify any victims. Lane’s attorney, Sean Smith, has not responded to media requests for comments.
