偷了6000萬兒童的數據剛認罪的少年

大多數19歲的年輕人都在成年時邁出了自己的第一步，以弄清楚自己是誰，19歲的馬修·D·萊恩已經確切地知道他是誰

A Massachusetts teen has pleaded guilty to a federal charge of cyber extortion, aggravated identity theft, and other offenses for hacking into a cloud company and stealing the personal data of tens of millions of children.

馬薩諸塞州的一名青少年對聯邦政府指控網絡勒索，嚴重的身份盜竊以及其他侵犯雲公司的罪行並竊取了數千萬兒童的個人數據。

Matthew D. Lane, 19, of North Andover, had previously pleaded not guilty to the charges in March 2024. But on Friday, he changed his plea to guilty.

北安多佛（North Andover）的19歲的馬修·D·萊恩（Matthew D. Lane）此前曾在2024年3月對這些指控表示不認罪。

According to prosecutors, Lane used stolen credentials to gain unauthorized access to a major cloud company, which is not named in court documents. However, several details in the case description and a statement from the company itself suggest that the cloud company was PowerSchool, a K-12 educational tech firm that provides software and services for schools and stores personal information for students and teachers across North America.

根據檢察官的說法，萊恩使用被盜的證書獲得了未經授權的訪問權限，該公司未在法院文件中命名。但是，案例描述中的一些細節和公司本身的聲明表明，雲公司是Powerschool，Powerschool是一家K-12教育技術公司，為學校和北美的學生和老師的個人信息提供軟件和服務。

Prosecutors said Lane used a spear phishing attack to steal the credentials of a high-level administrator at the cloud company. He then logged into a server and used a specialized tool to extract a vast amount of data from the company’s systems.

檢察官說，萊恩使用長矛網絡釣魚攻擊來竊取雲公司高級管理員的證書。然後，他登錄到服務器，並使用專門的工具從公司係統中提取大量數據。

The data included Social Security numbers, birthdays, medical records, passwords, addresses, and other sensitive information for more than 60 million children and 10 million teachers. The data also contained details of several programs used by the company, such as payroll, email, and learning management systems.

數據包括社會保險號，生日，醫療記錄，密碼，地址和其他敏感信息，適用於超過6000萬兒童和1000萬教師。數據還包含公司使用的幾個程序的詳細信息，例如工資單，電子郵件和學習管理系統。

After gaining access to the data, Lane, or someone with access to the data, sent a message to a cryptocurrency news outlet, offering the data for sale and threatening to leak it online if the price was not met.

在獲得數據，車道或具有訪問數據的人的訪問後，向加密貨幣新聞媒體發送了一條消息，提供出售的數據，並威脅要在價格上洩露它。

The message said that the data was available for 3 bitcoin, which was around $26,400 at the time. The contact also provided an email address for further communication.

消息說，這些數據可用於3個比特幣，當時約為26,400美元。該聯繫人還提供了一個電子郵件地址以進行進一步的通信。

Prosecutors said the data was stolen in 2023 and the ransom demand was made in May. The cryptocurrency news outlet contacted the FBI, who traced the email and IP address to Lane.

檢察官說，數據在2023年被盜，贖金需求於5月提出。加密貨幣新聞媒體與聯邦調查局（FBI）聯繫，後者將電子郵件和IP地址追溯到Lane。

Agents searched his home and seized several electronic devices, including a laptop, an iPhone, and an external hard drive. They also found a copy of the ransom message on his phone.

特工搜查了他的房屋，並抓住了幾種電子設備，包括筆記本電腦，iPhone和外部硬盤驅動器。他們還在手機上找到了贖金消息的副本。

In a statement released on Friday, the U.S. Attorney’s Office for the District of Massachusetts said Lane had committed serious cybercrimes that affected the lives of millions of people.

在周五發布的一份聲明中，美國馬薩諸塞州檢察官辦公室說，萊恩犯下了嚴重的網絡犯罪，影響了數百萬人的生活。

“This defendant engaged in a brazen scheme to steal personal data from a major cloud company and then extort ransom from the company in cryptocurrency,” said U.S. Attorney Lane. “He also stole identities and attempted to siphon funds from a telecom company. These offenses carry significant penalties and should serve as a deterrent to anyone considering similar crimes in the future.”

美國檢察官萊恩說：“這名被告人從事了一項粗暴的計劃，以從一家大型雲公司竊取個人數據，然後從加密貨幣的公司勒索贖金。” “他還偷走了身份，並試圖從一家電信公司那裡汲取資金。這些罪行受到了重大的罰款，應該對未來考慮類似犯罪的任何人進行威懾。”

“This case highlights the global reach of cybercrime and the FBI’s commitment to investigating and dismantling such activity wherever it occurs,” said Special Agent in Charge Burema. “We will continue to work tirelessly with our partners to protect the public from cybercriminals who seek to do harm.”

“此案強調了網絡犯罪的全球影響力以及聯邦調查局致力於調查和拆除此類活動的承諾，”負責人的特工Burema說。 “我們將繼續與我們的合作夥伴不懈地合作，以保護公眾免受試圖造成傷害的網絡犯罪分子的侵害。”

Lane pleaded guilty to one count of aggravated identity theft, one count of cyber extortion, one count of unauthorized access to a protected computer, and one count of conspiracy to commit wire fraud.

萊恩對一項嚴重的身份盜用，一項網絡勒索，一項未經授權訪問受保護的計算機的罪名以及一項陰謀犯有電匯欺詐的罪名認罪。

He faces a minimum sentence of 12 years in prison and a maximum sentence of 20 years. He will also be ordered to pay restitution to the victims.

他面臨的最低刑期為12年，最高刑期為20年。他還將被命令向受害者賠償。

Lane is scheduled to be sentenced by U.S. District Judge Robert E. Colgan on November 1.

Lane計劃於11月1日由美國地方法院法官Robert E. Colgan判刑。