Former Michigan football coach indicted in hacks of athlete databases of more than 100 colleges | The Record from Recorded Future News

Prosecutors claimed Weiss "cracked the encryption" protecting passwords used by athletes themselves — a tactic he learned through "research that he did on the internet." He also searched through data breaches to find leaked login information for certain athletes in order to access their accounts on social media. Weiss also "exploited vulnerabilities in universities' account authentication process to gain access to the accounts of students or alumni." Michigan and Westmont College are the only schools named as having students or alumni whose information was accessed. Acting U.S. Attorney Julie Beck announced the charges, accusing Weiss of gaining unauthorized access from 2015 to January 2023 to student athlete databases of more than 100 colleges and universities that were maintained by third-party vendor Keffer Development Services. In January 2023, Michigan placed Weiss on leave, telling ESPN that the school was investigating a "report of computer access crimes" that took place at the team facility in December 2022. A former University of Michigan assistant football coach was charged Thursday by federal prosecutors with hacking into the student athlete databases of more than 100 colleges and universities and accessing the medical information of about 150,000 people. The Justice Department unveiled a 24-count indictment of 42-year-old Matthew Weiss, who served as co-offensive coordinator for the university’s famed team for two seasons after working in minor roles for the NFL’s Baltimore Ravens. In addition to obtaining health information of students, he also hacked into the “social media, email, and/or cloud storage accounts of more than 2,000 target athletes,” as well as another 1,300 students and alumni from universities across the country, prosecutors said. Before joining Michigan University in 2021, Weiss worked for the Ravens dating back to 2009. Prosecutors believe he compromised the passwords of about 150 accounts on Keffer Development Services that gave him elevated levels of access typically offered to trainers and athletic directors. “After a review of University policies, the athletic department has terminated the appointment of co-offensive coordinator/quarterbacks coach Matt Weiss. The Ravens and the NFL did not respond to requests for comment about Weiss, who allegedly conducted the hacking of college databases while working for the team. Matt Weiss on the sidelines of a University of Michigan football game on October 23, 2021. Cheyvoryea Gibson, Special Agent in Charge of the FBI in Michigan, added that the FBI Detroit Cyber Task Force worked closely with the University of Michigan Police Department on the case.

This Cyber News was published on therecord.media. Publication date: Thu, 20 Mar 2025 22:00:14 +0000


Cyber News related to Former Michigan football coach indicted in hacks of athlete databases of more than 100 colleges | The Record from Recorded Future News

Former Michigan football coach indicted in hacks of athlete databases of more than 100 colleges | The Record from Recorded Future News - Prosecutors claimed Weiss "cracked the encryption" protecting passwords used by athletes themselves — a tactic he learned through "research that he did on the internet." He also searched through data breaches to find leaked ...
3 months ago Therecord.media
CVE-2022-49069 - In the Linux kernel, the following vulnerability has been resolved: ...
3 months ago
CVE-2019-5303 - There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing ...
1 year ago
CVE-2019-5302 - There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing ...
1 year ago
Schools in Maine, Indiana and Georgia contend ransomware attacks - Colleges and K-12 schools in several states are dealing with ransomware incidents causing outages and leaking sensitive data - a continuation of a trend that has affected campuses nationwide throughout the year. Henry County Schools - a district an ...
1 year ago Therecord.media CVE-2023-46604 Blacksuit
University of Michigan: Employee, student data stolen in cyberattack - The University of Michigan says in a statement today that hackers breaching its network in August accessed systems with information belonging to students, applicants, alumni, donors, employees, patients, and research study participants. Unauthorized ...
1 year ago Bleepingcomputer.com
15 PostgreSQL Monitoring Tools - 2025 - What is Good?What Could Be Better?Monitoring application performance, user experience, and errors.Some users find the pricing high, especially for larger environments.Continuous server, database, and infrastructure monitoring.The extensive feature ...
1 month ago Cybersecuritynews.com
'Sex life data' stolen from UK government among record number of ransomware attacks - Data on the sex lives of up to 10,000 people was stolen from a British government department in one of the record number of ransomware attacks to have hit Westminster in the first half of this year. It is not known which department the information ...
1 year ago Therecord.media
Changing How We Think About Technology - COMMENTARY. Knowledge is power, but it is only as powerful as the way organizations implement what they've learned and the subsequent decisions they make. All too often there is a flaw in thinking that is both tactical and short term in that we don't ...
1 year ago Darkreading.com
Malware Takedowns Show Progress, But Fight Against Cybercrime Not Over - Takedown of malware infrastructure by law enforcement has proven to have an impact, albeit limited, on cybercriminal activity, according to threat intelligence provider Recorded Future. The Emotet takedown, led by Europol and Eurojust in 2021. The ...
1 year ago Infosecurity-magazine.com
Ransomware attack disrupting Michigan's Sault Tribe operations | The Record from Recorded Future News - “A Sault Tribe data security incident has impacted Sault Tribe Health Division’s ability to provide comprehensive medical services,” Lowes said. A recent ransomware attack on the Sault Tribe in Michigan has knocked many of its most critical ...
4 months ago Therecord.media
Multiple colleges, K-12 schools facing outages after cyberattacks - Several K-12 schools, colleges and universities are dealing with significant technology outages due to cyberattacks this week. A spokesperson for North Carolina Central University told Recorded Future News that the school was alerted to a cyberattack ...
1 year ago Therecord.media
Cyber Insights 2023: Cyberinsurance - The result is more than a dozen features on subjects ranging from AI, quantum encryption, and attack surface management to venture capital, regulations, and criminal gangs. In 2022, Russia invaded Ukraine with the potential for more serious and more ...
2 years ago Securityweek.com
12 Software Dev Predictions for Future - Predicting the future of software development trends is always a tough call. Such trends will also rule the future of the software development industry. Analyzing these future software development trends will put enthusiasts ahead of the competition. ...
1 year ago Feeds.dzone.com
Thousands of Baltimore students, teachers affected by data breach following February ransomware attack | The Record from Recorded Future News - A Baltimore City Public Schools official confirmed to Recorded Future News that the incident was a ransomware attack but said no ransom was paid. Officials at Baltimore City Public Schools published a breach notice on Tuesday warning that a cyber ...
1 month ago Therecord.media
What's worse than paying extortion bot that pwned your DB? The Register - Publicly exposed PostgreSQL and MySQL databases with weak passwords are being autonomously wiped out by a malicious extortion bot - one that marks who pays up and who is not getting their data back. Origin unknown, the bot is routinely breaching ...
1 year ago Go.theregister.com
US to sign Pall Mall pact aimed at countering spyware abuses | The Record from Recorded Future News - The announcement comes nearly a week after 21 countries signed a voluntary and non-binding Code of Practice outlining how they intend to jointly regulate commercial cyber intrusion capabilities (CCICs) and combat spyware companies whose products have ...
2 months ago Therecord.media
GitHub restores code following malicious changes to tj-actions tool | The Record from Recorded Future News - On Friday, cybersecurity firm StepSecurity warned of a security incident impacting the tj-actions/changed-files GitHub Action, a popular tool used to track file changes and trigger other actions depending on those alterations. Mureinik told Recorded ...
3 months ago Therecord.media CVE-2025-30066
Pro-Palestinian operation claims dozens of data breaches against Israeli firms - Pro-Palestinian hackers say they breached dozens of Israeli entities amid the ongoing war in Gaza, which has also extended into cyberspace. A group calling itself Cyber Toufan said it launched an operation against Israel at the end of November, ...
1 year ago Therecord.media
Renewable Energy Technology: Powering the Future - Engage in the discussion on how renewable energy technology is set to revolutionize our world and reshape the energy landscape for future generations. From rooftop solar panels to large solar farms, this renewable technology is leading us towards ...
1 year ago Securityzap.com
Stolen credentials could unmask thousands of darknet child abuse website users - Thousands of people with accounts on darknet websites for sharing child sexual abuse material could be unmasked using information stolen by cybercriminals, according to research published Tuesday. In a proof-of-concept report, researchers at Recorded ...
11 months ago Therecord.media
AI-Powered Russian Network Pushes Fake Political News - Media organizations including Al-Jazeera, Fox News, the BBC, La Croix and TV5Monde are among those impacted. Sometimes legitimate sites are spoofed and hosted on alternative domains such as bbc-uk[. News, while on other occasions, stories are ...
1 year ago Infosecurity-magazine.com
British company Advanced fined £3m by privacy regulator over ransomware attack | The Record from Recorded Future News - His comments followed a series of ransomware incidents affecting the healthcare sector last year, including one in which every single household in the Scottish region of Dumfries and Galloway received a letter warning residents that their data was ...
2 months ago Therecord.media LockBit
1 million Corewell Health patients could be impacted by second data breach - GRAND RAPIDS, MI - About one million Corewell Health patients in southeast Michigan may have had their personal and medical information exposed in yet another nationwide data breach. Michigan Attorney General Dana Nessel on Tuesday, Dec. 26, ...
1 year ago Mlive.com
China's MIIT Proposes Color-coded Contingency Plan for Security Incidents - On Friday, China proposed a four-tier classification system, in an effort to address data security incidents, underscoring concerns of Beijing in regards to the widespread data leaks and hacking incidents in the country. This emergency plan comes ...
1 year ago Cysecurity.news