PowerSchool hacker sentenced to 4 years in prison

Matthew Lane used a PowerSchool contractor's credentials to breach the company in September 2024, stealing data on nearly 70 million students and teachers and extorting the vendor for a ransom that was paid; the incident caused more than $14 million in losses, led to downstream extortion attempts against school districts, and left roughly $3 million in illicit proceeds unaccounted for. Lane forfeited about $161,000, was ordered to pay $14.1 million in restitution and a $25,000 fine, and was sentenced to four years in prison followed by three years of supervised release.