Worcester College Student Sentenced to Four Years in Prison for Cyber Extortions

BOSTON - A former Assumption University student was sentenced on Oct. 14, 2025 for hacking into the computer networks of two U.S.-based companies and extorting them for ransoms.

Matthew D. Lane, 20, of Sterling, Mass., was sentenced by U.S. District Court Judge Margaret R. Guzman to four years in prison, three years of supervised release, a fine of $25,000, restitution of $14,075,540.58 and forfeiture. In June 2024, Lane pleaded guilty to cyber extortion conspiracy, cyber extortion, unauthorized access to protected computers and aggravated identity theft.

Lane was sentenced in connection with two separate cyber extortion incidents. Between April and May 2024, Lane agreed with others to extort a $200,000 ransom payment from a telecommunications company by threatening to publicly disseminate data that had previously been stolen from the company's computer network. When the victim company questioned whether a ransom payment would in fact end the threat of its customer data being leaked, Lane responded, "We are the only ones with a copy of this data now. Stop this nonsense [or] your executives and employees will see the same fate . . . . Make the correct decision and pay the ransom. If you keep stalling, it will be leaked."

Between August and December 2024, Lane used stolen login credentials to access the computer network of a second victim company - a software and cloud storage company that served school systems in the United States, Canada and elsewhere. Lane caused personally identifying information of students and teachers stored on that company's networks to be transferred to a computer server Lane leased in Ukraine. Later, the second victim company and others received threats that the names, email addresses, phone numbers, Social Security numbers, dates of birth, medical information, residential addresses, parent and guardian information, and passwords, among other data, of more than 60 million students and 10 million teachers would be "leak[ed] . . . worldwide" if the company did not pay a ransom of approximately $2.85 million in Bitcoin.

U.S. Attorney Leah B. Foley and Ted E. Docks, Special Agent in Charge of the Federal Bureau of Investigation, Boston Division made the announcement. The Assumption University Police Department provided valuable assistance. Assistant U.S. Attorney Kristen A. Kearney of the Securities, Financial & Cyber Fraud Unit prosecuted the case.