When Matthew Lane first used a Roblox cheating bot, he was a young child with a laptop and had what he later called a “bad year mentally.” Social Security numbers, Georgia, or the Boston field office of the FBI were not on his mind. He was considering winning a game. Nowadays, the majority of these stories seem to start in bedrooms, on kid-friendly platforms, with a friend who knows a guy who knows a script.
As he sat across from federal investigators at the age of 19, Lane eventually told ABC News that hacking gave him the most natural high he had ever experienced. superior to speed. At 120, better than a back road. It’s the kind of quote that sticks around, in part because it sounds like something a recovering gambler might say, and in part because that’s how law enforcement is increasingly handling it. Financial motivation is perceived by those handling these cases as being almost incidental. The result is dopamine.
| Name | Matthew D. Lane |
| Age at Arrest | 19 |
| Hometown | Sterling, Massachusetts |
| Current Status | Serving federal sentence |
| Sentence | Four years in federal prison |
| Primary Charge | Cyber extortion, aggravated identity theft |
| Company Targeted | PowerSchool (educational software) |
| Students Potentially Exposed | Roughly 62.4 million students, 9.5 million educators |
| Georgia Students Affected | Nearly 250,000 |
| Data Compromised | SSNs, birthdays, medical records, addresses |
| Origin of Skills | Roblox cheating community |
| Co-Defendants | Operated as part of a small ring |
| Investigating Agency | Federal Bureau of Investigation, Boston Field Office |
| Reported Ransom Demand | $2.85 million in Bitcoin |
| Year of Breach | December 2024 |
The PowerSchool hack wasn’t particularly sophisticated. Supervisory Special Agent Doug Domin described the case as “open-and-shut” after the FBI linked IP addresses to a server under Lane’s control in Ukraine. The larger pattern is more difficult to close. In the past two years, Lane is among a small but distinct group of American teenagers, some of whom are still in high school, who have been accused of violations that resemble state-sponsored labor. 21-year-old John Daghita is charged with stealing tens of millions of dollars in cryptocurrency from the federal government. The DraftKings intrusion was charged by Joseph Garrison, who was eighteen at the time. They are not exactly related. Their developmental profiles are similar.
It’s worth stopping to consider the economics. No part-time job at a Sandy Springs Kroger will match the skills of a talented teen with a stolen credentials database. An estimated £60 million and 101,000 customers were lost in a British case in 2015.
The children who were arrested ranged in age from 15 to 20. The part that should keep school administrators up at night is the regulator’s later statement that the breach occurred “with ease.” Approximately nine out of ten American districts use PowerSchool, which was allegedly compromised by a single stolen credential.
It’s difficult to ignore how much of this appears to be a crime story disguised as a public health story. The teenage brain is where impulsivity peaks. There is a high tolerance for risk. The circuitry for rewards is noisy. You can create an almost flawless funnel by dropping a curious 14-year-old into a Discord server where someone is offering $200 for a functional exploit. The on-ramp is nearly always a game, according to researchers examining these pathways, including a UK-led project on juvenile cyber-offending.
The question of whether prison rewires that wiring is its own. When you’re nineteen, four years is a long time. Lane’s quotations resemble the clarity of an addict rather than the calculation of a criminal. It appears that investigators anticipate more arrests, most likely involving children who have not yet graduated. As this develops, it’s tempting to wonder if the schools keeping all of this data and the businesses reselling it to them have given enough thought to who is actually on the other side of the firewall. Most likely not. Seldom do they do so until later.