Case Brief:

• Former Michigan coach Matt Weiss charged with hacking thousands of student accounts, focusing on female students.
• Federal indictment reveals disturbing details, including notes on victims' physical attributes and their intimate preferences.
• Case sparks urgent questions about cybersecurity at major universities and third-party data vendors.

By Samuel A. Lopez – USA Herald

DETROIT –Former University of Michigan co-offensive coordinator and quarterbacks coach Matt Weiss, 42, has been indicted on federal charges alleging he unlawfully accessed the private digital accounts of thousands of students nationwide, targeting especially female student-athletes to obtain intimate photos and personal data. The shocking revelations were detailed in a 24-count federal indictment filed Thursday in the U.S. District Court for the Eastern District of Michigan.

Weiss, who served on the Michigan coaching staff until his termination in January 2023, is accused of orchestrating an elaborate scheme spanning nearly eight years. Federal prosecutors have charged him with 14 counts of unauthorized computer access and 10 counts of aggravated identity theft.

According to the indictment, Weiss infiltrated the student-athlete databases maintained by Keffer Development Services, a third-party vendor managing student data for more than 100 colleges and universities nationwide. Over an eight-year period from 2015 to January 2023, Weiss allegedly accessed sensitive personal and private information for over 150,000 students.

Shockingly, prosecutors claim Weiss didn't stop at mere data theft; he systematically cracked encrypted passwords, enabling further invasions into victims' personal email accounts, social media profiles, and cloud storage services. The indictment specifies that Weiss targeted primarily female athletes, harvesting private images and videos explicitly intended for intimate partners.

According to the indictment, “Weiss researched the targeted athletes on the internet, months – and in some cases years – after he gained access to certain accounts, he returned to those accounts searching for additional photos and videos.”  

Further adding to the gravity of the accusations, the indictment discloses that Weiss meticulously documented his activities, maintaining notes detailing victims' physical attributes and their private sexual preferences.

Weiss's shocking abuses have cast a glaring spotlight on the cybersecurity measures—or apparent lack thereof—employed by universities and third-party vendors trusted with safeguarding sensitive student data. The indictment specifically accuses Weiss of exploiting "vulnerabilities in universities account authentication processes," raising troubling questions about whether lax cybersecurity facilitated these invasions.

The University of Michigan terminated Weiss's employment in January 2023, citing a "review of university policies."Yet, critics argue more stringent oversight may have prevented or mitigated Weiss’s actions.

If convicted, Weiss faces substantial prison time, with each count of unauthorized access carrying a maximum penalty of five years, and each aggravated identity theft charge mandating an additional two-year consecutive sentence.

Acting U.S. Attorney Julie A. Beck vowed a firm prosecutorial approach: “Our office will move aggressively to prosecute computer hacking to protect the private accounts of our citizens. We stand ready with our law enforcement partners to bring those who illegally invade the privacy of others to justice.” 

Special Agent Cheyvoryea Gibson, who leads the FBI's Detroit Cyber Task Force, praised the collaborative investigation, emphasizing, “Today’s indictment of Matthew Weiss underscores the commitment and meticulous investigative efforts of our law enforcement professionals.”

 “The FBI Detroit Cyber Task Force, in close collaboration with the University of Michigan Police Department, worked relentlessly on this case to safeguard and protect our community.” said Gibson.

An indictment is merely an accusation and does not constitute proof of guilt. The government bears the responsibility of establishing guilt beyond a reasonable doubt.

The prosecution of this case is being handled by Assistant United States Attorneys Timothy Wyse and Patrick Corbett, with the investigation being carried out by the Federal Bureau of Investigation.

Case Citation: United States of America v. Weiss v. Weiss, case number 2:25-cr-20165, in the U.S. District Court for the Eastern District of Michigan.

For a deeper dive, join me on Patreon.