U.S. man sentenced to prison over data breach that included Canadian students’ info

Advertisement

Advertise with us

An American man was sentenced Tuesday to four years in prison after pleading guilty to cyber extortion in the mass data breach of a student information system used across Canada. 

Read this article for free:


or

Already have an account? Log in here »

To continue reading, please subscribe:

Subscribe and receive a limited-edition Free Press branded hat or tote.

Digital Subscription

One year of digital access for only $205*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles

*First annual payment billed as $205.00 + GST for one year. This annual subscription will automatically renew at $233.00 + GST every 52 weeks (10% off the regular annual price of $259.35). Offer available to new and qualified returning subscribers only. Cancel any time.

To continue reading, please subscribe:

Add Free Press access to your Brandon Sun subscription for only an additional

$1 for the first 4 weeks*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles
Start now

*Your next Brandon Sun subscription payment will increase by $1.00 and you will be charged $17.95 plus GST for four weeks. After four weeks, your payment will increase to $24.95 plus GST every four weeks.

Hey there, time traveller!
This article was published 15/10/2025 (309 days ago), so information in it may no longer be current.

An American man was sentenced Tuesday to four years in prison after pleading guilty to cyber extortion in the mass data breach of a student information system used across Canada. 

Court documents show Matthew D. Lane was sentenced in a Massachusetts court after he pleaded guilty to charges relating to the cyber extortion of two companies. 

The companies were not named in court documents but PowerSchool, a software and cloud storage company for school systems in the U.S. and Canada, confirmed Wednesday that Lane was the person behind its data breach. 

Hands type on a computer keyboard in Toronto in this Sunday, Oct. 9 photo illustration.  THE CANADIAN PRESS/Graeme Roy
Hands type on a computer keyboard in Toronto in this Sunday, Oct. 9 photo illustration. THE CANADIAN PRESS/Graeme Roy

“PowerSchool appreciates the efforts of the prosecutors and law enforcement who brought this individual to justice,” a company spokesperson said in an emailed statement.

“We remain focused on supporting our school partners and safeguarding student, family, and educator data.”

The U.S. Attorney’s Office previously said in a media release that Lane was a student at Assumption University in Worcester, Mass.

PowerSchool had told school boards in Newfoundland and Labrador, Nova Scotia, Ontario, Alberta and elsewhere across North America that it experienced a data breach between Dec. 22 and 28 of last year. 

The Toronto District School Board, the largest school board in Canada, said in a letter to parents and caregivers in May that it had recently learned data stolen in December 2024 was not destroyed and that a “threat actor” had demanded ransom.

Court documents say a company targeted by Lane had received a ransom demand for $2.85 million worth of bitcoin with a threat to leak the names, email addresses, phone numbers, medical information and other data of millions of students and teachers.

PowerSchool said in May it had paid a ransom in hopes of preventing the public release of the stolen data, but it did not specify the amount.

In February, Canada’s federal privacy watchdog launched an investigation into the data breach. Privacy commissioner Philippe Dufresne discontinued the investigation in July, citing his office’s satisfaction with the company’s response and commitment to added security measures such as strengthened monitoring and detection tools. 

PowerSchool has said it will provide the commissioner with an independent security assessment and report of its information safeguards by March 2026.

This report by The Canadian Press was first published Oct. 15, 2025.

Report Error Submit a Tip

More Stories

Letters, Aug. 20

7 minute read 2:00 AM CDT

Old-fashioned news

I scrolled through the comment section of the online news story, my eyes darting through differing opinions until I landed on one that caught my attention. I felt my shoulders tense and my breath quicken as I read the fiery thoughts of a stranger.

Surely, there must be a better way to read the news?

I thought back to the ’90s. Every morning, my mother would open the front door to retrieve the Winnipeg Free Press. I would jump at the Arts section until I found the comics and giggle while I ate my cereal. My parents absorbed the news while getting ready for their day, and eventually the newspaper found its way to the top of the paper pile in the garage. The next morning, the cycle would repeat itself.

Man pleads guilty to shotgun slaying

Erik Pindera 5 minute read Preview

Man pleads guilty to shotgun slaying

Erik Pindera 5 minute read 2:01 AM CDT

A WINNIPEG drug dealer has pleaded guilty to second-degree murder in a March 2025 killing that saw the body of a 30-year-old man dumped in a garbage bin and dragged to a West End alleyway.

Frederick Francis Mathias Baker, who was 28 upon his arrest early last year, shot Bronson Emery Dale Kequahtooway once in the thigh with a sawed-off shotgun and left him with a fatal wound, Crown prosecutor Matt Armstrong told Court of King’s Bench Justice Brian Bowman on Wednesday.

A split second after Baker shot Kequahtooway in the thigh, the victim was shot in the head with a sawed-off .22 rifle. The man accused of being armed with the rifle, Eric Matthew Morrissette, remains before the court on a second-degree murder charge.

“Either wound would have been fatal on its own,” said Armstrong.

Read
2:01 AM CDT

Pharmacist who failed to disclose addiction, couldn’t account for ‘staggering’ amount of drugs fined $100K by disciplinary panel

Scott Billeck 4 minute read Preview

Pharmacist who failed to disclose addiction, couldn’t account for ‘staggering’ amount of drugs fined $100K by disciplinary panel

Scott Billeck 4 minute read Tuesday, Aug. 18, 2026

A June 9 disciplinary decision found more than 39,000 doses went unaccounted for while Glen Pauch, who worked at a Portage la Prairie pharmacy, was consuming drugs and improperly dispensing controlled substances — including opioids oxycodone and hydromorphone, and Concerta, a stimulant prescribed for ADHD — to 11 patients.

Read
Tuesday, Aug. 18, 2026

Pre-owned sets seller Romo’s Bricks seeks to click with Winnipeg’s Lego community

Aaron Epp 5 minute read Preview

Pre-owned sets seller Romo’s Bricks seeks to click with Winnipeg’s Lego community

Aaron Epp 5 minute read Yesterday at 8:17 PM CDT

There’s no mortar in sight but there are certainly thousands of bricks at a new brick-and-mortar store in Winnipeg catering to Lego enthusiasts.

Ashton Romaniuk and Madison Froome opened Romo’s Bricks in late spring. Located at 955 Milt Stegall Dr., in the same building as CanCentral Sports Cards & Memorabilia, the store specializes in selling pre-owned Lego sets, minifigures and other Lego-related products.

“It’s something we’re both passionate about,” Froome said.

To stock the store, she and Romaniuk spent $50,000 on four large Lego collections, purchased from local collectors. Romaniuk estimates that since the store opened on June 2, inventory has grown to $250,000 worth of Lego.

Read
Yesterday at 8:17 PM CDT

U.S. man sentenced to prison over data breach that included Canadian students’ info

Rianna Lim, The Canadian Press 3 minute read Preview

U.S. man sentenced to prison over data breach that included Canadian students’ info

Rianna Lim, The Canadian Press 3 minute read Wednesday, Oct. 15, 2025

An American man was sentenced Tuesday to four years in prison after pleading guilty to cyber extortion in the mass data breach of a student information system used across Canada. 

Court documents show Matthew D. Lane was sentenced in a Massachusetts court after he pleaded guilty to charges relating to the cyber extortion of two companies. 

The companies were not named in court documents but PowerSchool, a software and cloud storage company for school systems in the U.S. and Canada, confirmed Wednesday that Lane was the person behind its data breach. 

"PowerSchool appreciates the efforts of the prosecutors and law enforcement who brought this individual to justice," a company spokesperson said in an emailed statement.

Read
Wednesday, Oct. 15, 2025

Broadway Social: when public art gets it right

Stephen Borys 6 minute read Preview

Broadway Social: when public art gets it right

Stephen Borys 6 minute read 2:00 AM CDT

Great civic sculpture does something to us.

It might delight or irritate, intrigue or confuse. It can make us stop, look up, move closer. Sometimes we wonder who approved it, who paid for it, or what on Earth it is supposed to be. We photograph it, argue about it, give directions by it. Eventually, the best becomes part of a city’s mental map.

Indifference may be the one response it cannot afford.

I have been thinking about this since spending time with Broadway Social, Eduardo Aquino’s remarkable public sculpture on Broadway, directly across from the Fort Garry Hotel.

Read
2:00 AM CDT