Overview

• U.S. District Judge Margaret Guzman handed the 20-year-old a four-year prison term in Worcester, Massachusetts, followed by three years of supervised release.
• Lane was ordered to pay more than $14 million in restitution and a $25,000 fine after pleading guilty in June to cyber extortion, aggravated identity theft and unauthorized access.
• Prosecutors said he leveraged credentials from an earlier telecom breach to access PowerSchool, moved stolen data to a server in Ukraine and issued a $2.85 million bitcoin ransom demand.
• The breach exposed sensitive data for over 60 million U.S. students and 10 million educators, with at least 2.7 million Canadian students also affected.
• PowerSchool paid a ransom to secure deletion, yet reporting indicates stolen records persisted and school boards faced further extortion; about $160,000 was recovered while roughly $3 million remains unaccounted for.