Teen Hacker Sentenced for Major PowerSchool Data Breach Affecting Millions
Severity: High (Score: 65.0)
Sources: Abcnews, Wkbw, Abc11, 10News, Abc7Chicago
Summary
Matthew Lane, a 20-year-old hacker, was sentenced to four years in federal prison for orchestrating a massive data breach of PowerSchool, a platform managing student data for 60 million children and 10 million teachers. The breach, which occurred in 2024, involved unauthorized access using stolen credentials from a PowerSchool contractor. Lane's actions led to significant financial repercussions, with PowerSchool reportedly paying millions in ransom. Victims included thousands of families in Illinois, whose personal information was compromised, prompting concerns about long-term impacts on their security. Lane expressed remorse for his actions, attributing his criminal behavior to a hacking addiction that began in his teenage years. The breach has raised alarms about the increasing involvement of Generation Z in cybercrime, with experts noting a trend of young individuals engaging in hacking activities. Lane's case highlights the need for increased awareness and preventive measures against youth cybercrime. Key Points: • Matthew Lane hacked into PowerSchool, exposing data of 60 million children and 10 million teachers. • He was sentenced to four years in prison and ordered to pay over $14 million in restitution. • The breach has highlighted a concerning trend of young hackers, with many being recruited via social media.
Key Entities
- Data Breach (attack_type)
- Ransomware (attack_type)
- Assumption University (company)
- MGM Resorts (company)
- PowerSchool (company)
- San Diego Unified School District (company)
- Education (company)
- Canada (country)
- Ukraine (country)
- T1041 - Exfiltration Over C2 Channel (mitre_attack)
- T1078 - Valid Accounts (mitre_attack)