Matthew Lane, a 19-year-old student at Assumption University in Massachusetts, has agreed to plead guilty to hacking PowerSchool, a cloud-based education software provider, and stealing sensitive data on over 60 million students and 10 million teachers. Prosecutors say Lane used contractor credentials in September to access PowerSchool's network, obtaining names, addresses, Social Security numbers, and medical histories. Lane transferred the stolen data to a server leased from a cloud storage provider in Ukraine and then issued a ransom demand in December, threatening to release the data unless PowerSchool paid approximately $2.85 million in Bitcoin. PowerSchool paid the ransom to prevent the data leak. Court documents indicate Lane was affiliated with the ShinyHunters group and that school districts also received extortion demands related to the same data. Lane is also accused of extorting a $200,000 ransom from a telecommunications company after a $75,000 demand was refused. He faces charges of cyber extortion, aggravated identity theft, and unauthorized access to protected computers, and is expected to plead guilty to three of four federal charges as part of a plea deal.