19-year-old college student Matthew Lane from Massachusetts is set to plead guilty to a massive hack on PowerSchool, a student information system, involving cyber extortion and unauthorized access to protected computers.
Lane threatened to leak personal data of millions of students and teachers unless a $2.85 million ransom was paid to prevent exposure of names, email addresses, Social Security numbers, and medical information.
PowerSchool faced a data breach affecting personal information from its customer support portal, PowerSource, paid the ransom to prevent data exposure, but still received threats of data exposure.
The Department of Justice accused Lane of breaking into PowerSchool using stolen login credentials, transferring data to a server in Ukraine, breaching and extorting another US-based telecom company, and causing financial costs and fear among parents.