A student from Massachusetts, Matthew D. Lane, aged 19, has agreed to plead guilty to federal charges related to hacking and extortion targeting a prominent educational technology company, as confirmed by prosecutors on Tuesday. Lane allegedly gained unauthorized access to the company’s network using stolen login credentials, compromising the personal information of over 60 million students and 10 million teachers.
The data breach resulted in the theft of sensitive information, including names, addresses, phone numbers, Social Security numbers, medical records, and academic grades, along with historical student data spanning decades. Although the company involved was not explicitly named in the report, details closely align with incidents reported by PowerSchool, an education software firm that disclosed a breach affecting various schools primarily in the U.S. and Canada.
Federal prosecutors indicate that Lane collaborated with a co-conspirator based in Illinois to extort approximately $2.85 million in cryptocurrency from the education software company. PowerSchool acknowledged in January that it had paid ransom to eliminate the stolen data but did not disclose the exact amount. Recently, several school districts reported further extortion attempts linked to claims that the stolen data had not been fully eradicated. PowerSchool clarified that these threats were related to data from the earlier breach in December.
NBC News first reported Lane’s plea agreement. A spokesperson for PowerSchool acknowledged awareness of the federal filings but directed further comments to the U.S. Attorney’s Office for Massachusetts, which has opted not to identify the victims publicly. The spokesperson also did not contest the ransom amount alleged by prosecutors.
In addition to the allegations involving the educational tech firm, Lane faces accusations of hacking and extorting another unidentified U.S. telecommunications provider. As the legal proceedings unfold, Lane’s attorney has yet to respond to requests for comments on the case.
This situation highlights the increasing risks posed by cyber threats in the education sector and raises concerns about the safeguarding of personal data in the face of evolving technological vulnerabilities.
Fanpage:Â TechArena.au
Watch more about AI – Artificial Intelligence
