偷了6000万儿童的数据刚认罪的少年

大多数19岁的年轻人都在成年时迈出了自己的第一步，以弄清楚自己是谁，19岁的马修·D·莱恩已经确切地知道他是谁

A Massachusetts teen has pleaded guilty to a federal charge of cyber extortion, aggravated identity theft, and other offenses for hacking into a cloud company and stealing the personal data of tens of millions of children.

马萨诸塞州的一名青少年对联邦政府指控网络勒索，严重的身份盗窃以及其他侵犯云公司的罪行并窃取了数千万儿童的个人数据。

Matthew D. Lane, 19, of North Andover, had previously pleaded not guilty to the charges in March 2024. But on Friday, he changed his plea to guilty.

北安多佛（North Andover）的19岁的马修·D·莱恩（Matthew D. Lane）此前曾在2024年3月对这些指控表示不认罪。

According to prosecutors, Lane used stolen credentials to gain unauthorized access to a major cloud company, which is not named in court documents. However, several details in the case description and a statement from the company itself suggest that the cloud company was PowerSchool, a K-12 educational tech firm that provides software and services for schools and stores personal information for students and teachers across North America.

根据检察官的说法，莱恩使用被盗的证书获得了未经授权的访问权限，该公司未在法院文件中命名。但是，案例描述中的一些细节和公司本身的声明表明，云公司是Powerschool，Powerschool是一家K-12教育技术公司，为学校和北美的学生和老师的个人信息提供软件和服务。

Prosecutors said Lane used a spear phishing attack to steal the credentials of a high-level administrator at the cloud company. He then logged into a server and used a specialized tool to extract a vast amount of data from the company’s systems.

检察官说，莱恩使用长矛网络钓鱼攻击来窃取云公司高级管理员的证书。然后，他登录到服务器，并使用专门的工具从公司系统中提取大量数据。

The data included Social Security numbers, birthdays, medical records, passwords, addresses, and other sensitive information for more than 60 million children and 10 million teachers. The data also contained details of several programs used by the company, such as payroll, email, and learning management systems.

数据包括社会保险号，生日，医疗记录，密码，地址和其他敏感信息，适用于超过6000万儿童和1000万教师。数据还包含公司使用的几个程序的详细信息，例如工资单，电子邮件和学习管理系统。

After gaining access to the data, Lane, or someone with access to the data, sent a message to a cryptocurrency news outlet, offering the data for sale and threatening to leak it online if the price was not met.

在获得数据，车道或具有访问数据的人的访问后，向加密货币新闻媒体发送了一条消息，提供出售的数据，并威胁要在价格上泄露它。

The message said that the data was available for 3 bitcoin, which was around $26,400 at the time. The contact also provided an email address for further communication.

消息说，这些数据可用于3个比特币，当时约为26,400美元。该联系人还提供了一个电子邮件地址以进行进一步的通信。

Prosecutors said the data was stolen in 2023 and the ransom demand was made in May. The cryptocurrency news outlet contacted the FBI, who traced the email and IP address to Lane.

检察官说，数据在2023年被盗，赎金需求于5月提出。加密货币新闻媒体与联邦调查局（FBI）联系，后者将电子邮件和IP地址追溯到Lane。

Agents searched his home and seized several electronic devices, including a laptop, an iPhone, and an external hard drive. They also found a copy of the ransom message on his phone.

特工搜查了他的房屋，并抓住了几种电子设备，包括笔记本电脑，iPhone和外部硬盘驱动器。他们还在手机上找到了赎金消息的副本。

In a statement released on Friday, the U.S. Attorney’s Office for the District of Massachusetts said Lane had committed serious cybercrimes that affected the lives of millions of people.

在周五发布的一份声明中，美国马萨诸塞州检察官办公室说，莱恩犯下了严重的网络犯罪，影响了数百万人的生活。

“This defendant engaged in a brazen scheme to steal personal data from a major cloud company and then extort ransom from the company in cryptocurrency,” said U.S. Attorney Lane. “He also stole identities and attempted to siphon funds from a telecom company. These offenses carry significant penalties and should serve as a deterrent to anyone considering similar crimes in the future.”

美国检察官莱恩说：“这名被告人从事了一项粗暴的计划，以从一家大型云公司窃取个人数据，然后从加密货币的公司勒索赎金。” “他还偷走了身份，并试图从一家电信公司那里汲取资金。这些罪行受到了重大的罚款，应该对未来考虑类似犯罪的任何人进行威慑。”

“This case highlights the global reach of cybercrime and the FBI’s commitment to investigating and dismantling such activity wherever it occurs,” said Special Agent in Charge Burema. “We will continue to work tirelessly with our partners to protect the public from cybercriminals who seek to do harm.”

“此案强调了网络犯罪的全球影响力以及联邦调查局致力于调查和拆除此类活动的承诺，”负责人的特工Burema说。 “我们将继续与我们的合作伙伴不懈地合作，以保护公众免受试图造成伤害的网络犯罪分子的侵害。”

Lane pleaded guilty to one count of aggravated identity theft, one count of cyber extortion, one count of unauthorized access to a protected computer, and one count of conspiracy to commit wire fraud.

莱恩对一项严重的身份盗用，一项网络勒索，一项未经授权访问受保护的计算机的罪名以及一项阴谋犯有电汇欺诈的罪名认罪。

He faces a minimum sentence of 12 years in prison and a maximum sentence of 20 years. He will also be ordered to pay restitution to the victims.

他面临的最低刑期为12年，最高刑期为20年。他还将被命令向受害者赔偿。

Lane is scheduled to be sentenced by U.S. District Judge Robert E. Colgan on November 1.

Lane计划于11月1日由美国地方法院法官Robert E. Colgan判刑。