Wed Oct 15 17:20:00 UTC 2025: ## Hacker Behind Massive PowerSchool Breach Sentenced to Four Years, Ordered to Pay $14 Million
**BOSTON, MA** – Matthew Lane, the 20-year-old hacker responsible for a devastating cyberattack on education technology giant PowerSchool, was sentenced to four years in federal prison and ordered to pay over $14 million in restitution on Tuesday. Lane, a former college student, pleaded guilty in June to perpetrating what is considered the largest exposure of private student data in history, compromising the sensitive information of approximately 60 million students and 10 million educators.
The breach, which occurred in September 2024, saw Lane infiltrate PowerSchool’s network and transfer stolen data to a server in Ukraine. He later demanded a $2.85 million ransom in Bitcoin, threatening to leak student and teacher data, including Social Security numbers of children as young as five, “worldwide.”
During the sentencing hearing, Lane apologized for his actions, acknowledging that his crimes occurred during a “dark time” and that he deserved punishment. “I robbed actual people and their families of their sense of security,” he told U.S. District Court Judge Margaret Guzman, adding he was “thankful I got caught.”
Federal prosecutors had sought a seven-year sentence, arguing that Lane was motivated by greed and posed a significant threat to PowerSchool. They cited a message threatening to “destroy your company and bankrupt it to the point of no absolute return” if the ransom wasn’t paid. Prosecutors also revealed Lane’s prior cybercriminal activity, including the extortion of $200,000 from a telecommunications company.
Judge Guzman, while appearing sympathetic to Lane’s age at the time of the attacks, emphasized the need for a strong deterrent and cautioned parents about the dangers of unrestricted access to technology for children. She noted the “breadth and reach of technology” to commit crimes anonymously.
The prosecution further argued that Lane’s actions were not a mere “teenage mistake,” but a calculated plan driven by a desire for wealth and luxury. They also raised concerns about unaccounted for cryptocurrency, with roughly $3 million remaining missing.
Following the sentencing, a tearful Lane embraced family and friends outside the courtroom before being taken into custody. In a statement, PowerSchool expressed appreciation for the efforts of prosecutors and law enforcement and reiterated its commitment to safeguarding student data.