Matthew Lane Sentenced to Four Years for PowerSchool Data Breach
Summary
Matthew Lane pleaded guilty and was sentenced to four years in prison for his role in the PowerSchool breach. The article says stolen contractor credentials were used to extract data tied to about 60 million students and 10 million teachers, followed by extortion.
Key points
- Lane accessed PowerSchool systems in late 2024 using stolen contractor credentials, according to the article.
- Data was extracted to external servers, and attackers threatened to release it unless PowerSchool paid a ransom.
- The breach exposed data tied to roughly 60 million students and 10 million teachers; sensitive details including Social Security numbers, birth dates, grades and medical information were at risk.
- The article says PowerSchool paid millions in ransom, but some stolen data later resurfaced in further extortion attempts.
- Lane pleaded guilty to multiple charges, including cyber extortion, and received a four-year prison sentence and more than $14 million in restitution.
- The case highlights ongoing risks from resurfacing stolen data and the article’s concerns about young people being drawn into cybercrime through online forums and gaming communities.
Article Details
- Victim Organization
- PowerSchool
- Incident Type
- Unauthorized access using stolen contractor credentials, data extraction, and cyber extortion
- Data Types Exposed
- Social Security numbers
- dates of birth
- grades
- medical information
- Affected Records
- Approximately 60 million students and 10 million teachers
- Operational Impact
- The breach prompted alerts to schools and families. Some stolen data later resurfaced in additional extortion attempts, creating ongoing risks for victims.
- Ransom Or Extortion
- PowerSchool paid millions in ransom after threats to release the data. Some stolen data later resurfaced in additional extortion attempts.
- Claim Status
- confirmed