A Text Message on the Way to Prison

As his parents drove him to a federal prison in Connecticut earlier this year, 20-year-old Matthew Lane pulled out his phone and sent a final message to reporters. “It’s extremely sad, and I’m just scared,” he wrote. It was a jarring moment of vulnerability from someone whose actions had been anything but — a young man who, barely a year earlier, had triggered one of the most alarming cybersecurity crises in American history.

Now 20, Matthew Lane says he was a malicious hacker by age 15. “I was addicted to hacking. That gave me the most natural high ever,” Lane said. In an exclusive interview before reporting to prison — his first time speaking publicly — Lane offered a rare, unfiltered look at how an ordinary teenager from Massachusetts became the face of a federal cybercrime case that rattled the highest levels of the U.S. government.

The Breach That Reached the White House

Barely a year before his interview, while still a teenager, Lane helped launch what’s been described as the biggest cyberattack in U.S. education history — a data breach that concerned authorities so much, it prompted briefings with senior government officials inside the White House Situation Room. The target was not a bank or a defense contractor. It was a company that manages the daily records of children across North America.

The breach pierced the education technology company PowerSchool — used by 80% of school districts in North America — and “put at risk the security of 60 million children and 10 million teachers,” the Justice Department said. In 2024, Lane hacked into the company by using an employee’s stolen login credentials, then exfiltrated student and teacher data, including Social Security numbers, dates of birth, and medical information. The stolen information was then moved to a server in Ukraine that Lane leased. The hackers threatened to leak the data unless a $2.85 million ransom was paid in Bitcoin. PowerSchool paid.

The FBI’s Cyber Task Force in Boston devoted most of its resources to uncovering who was behind the breach. Within weeks, the FBI figured out at least one of them: a 19-year-old freshman at Assumption University in Worcester, Massachusetts. At about 6:30 on a Tuesday morning, FBI agents started banging on the door of Lane’s second-floor dorm room. The PowerSchool hack was not Lane’s only crime. Lane also pleaded guilty to working with an unnamed co-conspirator from Illinois to extort $200,000 from a U.S.-based wireless telecommunications company.

Sentenced, Sobbing, and Self-Aware

Lane pleaded guilty to unlawfully accessing PowerSchool’s computers and three other federal charges, including cyber extortion. A federal judge in Massachusetts sentenced him to four years in federal prison and ordered him to pay more than $14 million in restitution. Accompanied in court by family members and several friends, Lane broke down and sobbed after learning his sentence, which includes three years of supervised release and a $25,000 fine.

Lane said he had drug and mental health issues, but found solace playing the popular kids’ game Roblox and participating in the game cheating community. He said he has autism and became addicted to hacking. The judge noted that the challenges Lane faced as a teenager, including social isolation and struggles to fit in with his peers, made him “vulnerable to falling through the rabbit hole.” “I think I need to go to prison for what I did,” Lane told reporters. “It was disgusting, it was greedy, it was rooted in my own insecurities, it was wrong in every aspect,” he said.

A Warning for Every Parent

During Lane’s sentencing hearing, the judge issued a stark warning: “If we put the computer in their room, the phone in their hand, it’s like a gun,” U.S. District Court Judge Margaret Guzman said. Lane is just one example of what cybersecurity experts, authorities, and even Lane himself say is a wide-ranging menace: a new generation of tech-savvy teenagers who are uniquely dangerous and surprisingly young. “We’ve worked cases where individuals as young as 14 are being interviewed by the FBI,” said Supervisory Special Agent Doug Domin, who oversaw the PowerSchool investigation.

The majority of people committing cybercrimes are children, according to Fergus Hay, founder of The Hacking Games, which finds neurodivergent Gen Z hackers developing skills in the gaming world and encourages them to use their talent for good. Hay noted that these hackers are often neurodivergent — wired to spot patterns, solve puzzles, and push systems to their limits. The question, experts say, is whether society can redirect that energy before the FBI comes knocking. Lane himself put it plainly: “I’m mad at myself,