Computer hacker and former college student Matthew Lane 鈥� who was a teenager when he carried out a massive cyberattack on education technology company PowerSchool 鈥� was sentenced in federal court on Tuesday to four years in prison and ordered to pay more than $14 million in restitution.聽

Lane, a former Assumption University freshman who federal prosecutors described as a sophisticated and experienced cybercriminal, told a federal judge that his crimes occurred during an 鈥渆xtremely dark time in my life,鈥� but acknowledged, 鈥淚 deserve to be punished.鈥� In June, Lane pleaded guilty to what is widely considered the largest exposure of private student data in history, a breach that compromised the sensitive information of some 60 million students and 10 million educators.

鈥淚 robbed actual people and their families of their sense of security,鈥� Lane, now 20, told U.S. District Court Judge Margaret Guzman, his shaggy hair obscuring his eyebrows and the tops of his glasses, adding he was 鈥渢hankful I got caught.鈥�

Lane said he takes 鈥渇ull responsibility” for his crimes but that he was 鈥渄isconnected from reality鈥� while he engaged in hacking. He has since become 鈥渟ober not just from drugs, but from the internet as well,” he told Guzman.

Accompanied in court by family members and several friends, Lane broke down and sobbed after learning his sentence, which includes three years of supervised release and a $25,000 fine.

He was convicted of cyber extortion conspiracy, cyber extortion, unauthorized access to protected computers and aggravated identity theft. Federal prosecutors were seeking a seven-year prison term, describing Lane in a sentencing memo as being motivated by greed and said the threat to Powerschool warned, 鈥渨e fully intend to destroy your company and bankrupt it to the point of no absolute return 鈥� if it didn鈥檛 meet a $2.85 million ransom demand in Bitcoin.

Lane鈥檚 sentencing concludes a yearlong cybercrime saga, which began in September 2024 when prosecutors say he hacked into PowerSchool鈥檚 computer network and transferred stolen records to a leased server in Ukraine. About three months later, PowerSchool officials received the extortion demand to prevent sensitive student and teacher data 鈥� including the Social Security numbers of children as young as 5 鈥� from being leaked 鈥渨orldwide.鈥� 

Lane also pleaded guilty to working with an unnamed co-conspirator from Illinois to extort $200,000 from an unnamed U.S.-based wireless telecommunications company between April and May 2024 before he discussed the 鈥渘eed to hack another shitty company that[鈥橾ll pay鈥� and set his sights on PowerSchool. 

Guzman, who appeared sympathetic to Lane鈥檚 young age at the time he carried out multiple cyberattacks, said the case should serve as a cautionary tale to parents everywhere and expressed alarm about the 鈥渂readth and reach of technology鈥� to commit crimes anonymously. Guzman said the challenges Lane faced as a teenager, including social isolation and struggles to fit in with his peers, made him 鈥渧ulnerable to falling through the rabbit hole.鈥� 

Guzman said society can鈥檛 go back to the days of typewriters and television sets with just five channels. But parents have placed computers in their children’s bedrooms and provided cell phones to grade schoolers without proper guardrails. Lane, she said, won鈥檛 be the last one to exhibit 鈥渂ravado behind the screen of a computer.鈥� 

Defense attorney Sean Smith asked the judge to sentence Lane to three years in prison and three years of supervised release. Smith said Lane was 鈥渧ery much cognizant of the seriousness鈥� of his offenses and that he pleaded guilty and 鈥渁dmitted fault almost from the get-go.鈥� 

Smith said Lane was a teenager when the cyberattacks unfolded and had no previous convictions. Letters of support submitted by family members to the court made clear Lane was 鈥渁 generous, loving, patient individual,鈥� who grappled with loneliness, depression and anxiety.

The seriousness of Lane鈥檚 actions 鈥渃an鈥檛 be overstated,鈥� said Assistant U.S. Attorney Kristen Kearney, who called his behavior 鈥渃alculated.鈥� The PowerSchool data breach has caused real harm to millions of people, she said, who now face stifled job prospects, heightened insurance costs and other harms that will follow them 鈥渇or the rest of their lives.鈥� 

Kearney noted that Lane made several efforts to conceal his identity and avoid detection and was financially motivated: He desired designer clothes and jewelry, she said, and to 鈥渉ost parties at extravagant Airbnbs.鈥� 

Lane 鈥渄id not make a teenage mistake鈥� or get 鈥渕ixed up with the wrong crowd,鈥� she argued, but carried out 鈥渃arefully planned attacks鈥� for financial gain. Personal statements that put Lane in a positive light, she said, showed he was living 鈥渁 double life.鈥� In the online world, she said, digital chat messages included racial slurs, antisemitism and threats of sexual violence. 

The prosecutor challenged Lane鈥檚 request for a three-year prison sentence, arguing that other cybercriminals could see it as the cost of doing business if they have millions of dollars in cryptocurrency waiting for them after their release. Lane returned about $160,000 to the government, according to a sentencing memo released last week, but roughly $3 million remains unaccounted for. 

Kearney also disputed Smith鈥檚 assertion that Lane was a first-time offender at the time of the PowerSchool breach, despite his absence of a criminal record. Last week, federal officials accused him of carrying out at least eight cyberattacks dating back to at least 2021 when he was still in high school.

Prosecutors said the PowerSchool attack resulted in more than $14 million in damages, including the ransom payment and identity theft services for the students and teachers who were victimized. 

In a statement to 社区黑料 on Tuesday, PowerSchool said it 鈥渁ppreciates the efforts of the prosecutors and law enforcement who brought this individual to justice鈥� and that the company remains focused on 鈥渟upporting our school partners and safeguarding student, family and educator data.鈥�

After the sentencing hearing, a tearful Lane, who wasn鈥檛 immediately taken into custody, was embraced by friends and family members. 

鈥淚鈥檓 sorry, guys,鈥� he said to four friends outside the courtroom, exchanging hugs and handshakes before getting into an elevator. 鈥淚 love you guys.鈥�