Gen Z Hacker Sentenced for Massive PowerSchool Data Breach Impacting Thousands of Students A 20-year-old Massachusetts man, Matthew Lane, has been sentenced to four years in federal prison for orchestrating a 2024 cyberattack on PowerSchool, a K-12 software platform used by schools across Illinois. The breach exposed sensitive data belonging to thousands of students, teachers, and parents, including credit information and personal records. Lane, who pleaded guilty to charges of unauthorized computer access, identity theft, and cyber extortion, admitted to hacking the system while dual-majoring in cybersecurity and computer science. He expressed remorse in an exclusive interview with ABC News, stating he was "addicted to hacking" and acknowledged the lifelong impact on victims. "I took their sense of security," he said. The attack prompted affected families, like that of Elena Cutri whose three children attend Elmhurst District 205 to freeze their credit after receiving breach notifications. PowerSchool confirmed paying a nearly $3 million Bitcoin ransom to the hackers, though it remains unclear how much Lane and an unnamed co-conspirator received. The company later provided two years of credit monitoring and identity protection to those affected. FBI Supervisory Special Agent Doug Domin described the incident as one of the most financially damaging cases he’s seen, emphasizing the lasting consequences for victims. While Lane acted independently, authorities warn of a growing trend of young hackers some recruited via social media and gaming platforms being exploited by criminal organizations. Lane was ordered to pay over $14 million in restitution and will serve his sentence starting in November 2025. The FBI continues to investigate potential co-conspirators. PowerSchool stated it has since reinforced security measures to protect student and educator data.