Matt Weiss Charged With Hacking Student Accounts at University of Michigan
- Securityish
- Privacy & Personal Security
Quick Summary
Matt Weiss, former co-offensive coordinator at the University of Michigan, faces charges for allegedly hacking into college students’ accounts to steal explicit photos. Security footage captured Weiss accessing personal accounts from the football facility in December 2022, leading to the discovery of unauthorized access to over 2,000 athletes’ information. Weiss is charged with 14 counts of unauthorized access and 10 counts of aggravated identity theft, with potential sentences exceeding 70 years.
The Securityish Brief
Matt Weiss, who served as Michigan’s co-offensive coordinator during the 2022 season, is under investigation for allegedly hacking into the personal accounts of college students to steal sexually explicit photos and videos. The FBI’s search warrant affidavit details that security footage captured Weiss at the football facility, Schembechler Hall, during multiple hacking attempts in December 2022. Investigators assert that Weiss accessed athletes’ personal accounts from computers in the quarterbacks and tight ends meeting rooms.
The FBI obtained a search warrant in March 2023, allowing them to search 14 electronic devices belonging to Weiss and the university. This followed a discovery by Michigan’s IT staff that passwords for 46 alumni email accounts had been reset, traced back to computers at Schembechler Hall. Surveillance footage allegedly shows Weiss resetting nine alumni passwords on December 21, 2022, between 10:33 a.m. and 12:55 p.m.
Weiss is also accused of transferring data from victims’ accounts to an external storage account while attempting to bypass two-factor authentication and passwords. The initial indictment claimed that Weiss accessed a third-party database used by over 100 colleges and universities, obtaining personal information about more than 2,000 athletes and 1,300 additional students and alumni.
He faces serious charges, including 14 counts of unauthorized access to computers and 10 counts of aggravated identity theft, with maximum sentences that could total over 70 years in prison. Weiss’s legal team has argued against the validity of the evidence gathered, stating that the prosecution’s approach could redefine the legal consequences of computer hacking.
Implications for Cybersecurity
This case highlights significant risks associated with unauthorized access to personal data, particularly in educational institutions where sensitive information is stored. The incident underscores the importance of robust cybersecurity measures to protect student data from potential breaches.
Organizations should be vigilant about monitoring access to sensitive accounts and implementing strong authentication protocols to prevent unauthorized access. The case also serves as a reminder for individuals to regularly update their passwords and enable two-factor authentication where possible to enhance their personal security.
Key Takeaways
- Regularly update passwords for all accounts, especially for sensitive information.
- Enable two-factor authentication on accounts to add an extra layer of security.
- Monitor account activity for any unauthorized access or suspicious behavior.
- Educate yourself about phishing attempts and other common hacking techniques.
- Report any suspicious activity to your institution’s IT department immediately.
Key Terms & Concepts
- Unauthorized Access: In this article, unauthorized access refers to gaining entry to computer systems or accounts without permission.
- Aggravated Identity Theft: Aggravated identity theft involves using someone else’s personal information for fraudulent purposes, which can lead to severe legal penalties.
- Two-Factor Authentication: Two-factor authentication is a security process that requires two different forms of identification before granting access to an account.
Read the original article here: https://www.nytimes.com/athletic/6907418/2025/12/21/matt-weiss-hacking-security-footage-michigan/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
