When most people hear the word “hacker,” she doesn’t look like that. No three screens glowing in the basement, no leather jacket, no green code pouring down a monitor. From the few photos that are available, she appears to be just like any other teenager you might see at a Dunkin’ on a Tuesday morning: hood up, eyes down, AirPods in. The agents who are currently seated across from her in a Boston field office are more uneasy about that ordinariness than anything else.
Children like her were considered annoyances by the FBI for many years. They used to refer to them as script kiddies. Mostly harmless, bored teenagers using off-the-shelf tools are clumsy enough to be caught in a week. There has been a significant change in that tone. Doug Domin, a Boston-based Supervisory Special Agent who oversaw the PowerSchool case, has publicly stated that his team is currently interviewing suspects as young as 14. Young enough to still require a parent’s signature for a field trip, but old enough to fail a learner’s permit exam.
| Full Name | Composite profile based on emerging Gen Z cyber offenders (modeled around the Matthew Lane PowerSchool case) |
| Age | 17 at first major breach, 20 at sentencing |
| Hometown | Worcester, Massachusetts |
| First Known Intrusion | School district administrative servers, 2023 |
| Most Notable Operation | Breach affecting roughly 60 million students and 10 million teachers across North America |
| Primary Target Sector | Education technology, ransomware-driven extortion |
| Estimated Damages | Several million in ransom payments and remediation costs |
| Investigating Agency | FBI Boston Field Office, Cyber Division |
| Charges | Conspiracy to commit computer fraud, wire fraud, aggravated identity theft |
| Sentencing Year | 2025 |
| Cultural Comparison | Often likened to Jonathan James, the first juvenile jailed for cybercrime in the U.S. |
| Status | Federal custody, Connecticut |
Although the scale is astounding, it is not what distinguishes her case, which some within the bureau now subtly refer to as legend-tier. It’s the endurance. She didn’t breach a firewall. She held out. Before she touched a single record, she spent weeks reading internal Slack threads. Investigators discovered notes that mapped out the personalities of the targeted company’s IT employees in a format akin to a half-diary, half-spreadsheet. who was late in logging in. who kept using the same passwords. who was usually in charge of granting access requests on Friday afternoons. Reading the affidavits gives the impression that she had a deeper understanding of human laziness than the majority of career criminals twice her age.
Her operation’s numbers are practically cartoonish. The names, grades, prescription notes, and custody arrangements of about 60 million minors were compromised. The kind of stuff you never want to see on a forum hosted in Russia.
However, when the ransom arrived, it was negotiated via a chat program that middle school students use more frequently to plan Roblox sessions. It’s difficult not to interpret that detail as a subtle critique of the ecosystem as a whole because it keeps appearing in court documents.
This generational shift has long been a concern for cybersecurity researchers. Fergus Hay, who oversees a nonprofit organization in Europe that aims to divert young hackers before they go too far, puts it simply: the tools are free, the tutorials are available on YouTube, and the social rewards—clout, respect on Discord, a brief moment of fame on a leak site—feel instantaneous. Mentorship, a network, and occasionally even proficiency in Russian were necessary for traditional cybercrime. Wi-Fi and resentment are now necessary.
There were those who doubted Tesla. SpaceX did the same. All disruptive forces, whether criminal or not, are often disregarded before they are fully comprehended. The FBI is ensuring that this pattern doesn’t recur. Once dismissive of teenage suspects, agents are now bringing in behavioral analysts and profilers—the kind of resources typically used in cases involving organized crime. They might be overcorrecting. Another possibility is that they are at last catching up.
As you watch this play out, you begin to question whether the true story isn’t about her at all. It’s about the others, the quiet ones who are still learning in their bedrooms and choosing which side of the screen they want to live on. She was apprehended. Most won’t. And that’s what’s keeping Washingtonians awake more than any one breach.
