Dec 18, 2023, 04:46 PM
Conor LaHiff, a former IT manager for a New Jersey public high school, has confessed to carrying out a cyberattack against his previous employer after being fired in June 2023.
Recently, the U.S. Department of Justice (DOJ) declared that LaHiff has admitted guilt to one charge of unauthorized damage to protected computers, which is a violation of the Computer Fraud and Abuse Act (CFAA).
According to the DOJ statement, the cyberattack was an act of revenge, specifically aimed at Apple and IT administrator accounts in order to disrupt and harm the school's functioning.
LaHiff, after losing his job, utilized his administrative rights to disable and erase numerous Apple IDs from the school's Apple School Manager account. This software is employed to oversee the technological resources of students, faculty, and staff.
LaHiff disabled over 1,400 additional Apple accounts and other IT administrative accounts.
Additionally, the school's private branch phone system was deactivated, resulting in the unavailability of phone service for around 24 hours.
LaHiff's actions resulted in the school facing a minimum of $5,000 in direct financial losses, as stated in the announcement.
LaHiff is set to receive his sentence on March 20, 2024.
He could face a maximum penalty of 10 years in prison and fines of up to $250,000.
Recently, the U.S. Department of Justice (DOJ) declared that LaHiff has admitted guilt to one charge of unauthorized damage to protected computers, which is a violation of the Computer Fraud and Abuse Act (CFAA).
According to the DOJ statement, the cyberattack was an act of revenge, specifically aimed at Apple and IT administrator accounts in order to disrupt and harm the school's functioning.
LaHiff, after losing his job, utilized his administrative rights to disable and erase numerous Apple IDs from the school's Apple School Manager account. This software is employed to oversee the technological resources of students, faculty, and staff.
LaHiff disabled over 1,400 additional Apple accounts and other IT administrative accounts.
Additionally, the school's private branch phone system was deactivated, resulting in the unavailability of phone service for around 24 hours.
LaHiff's actions resulted in the school facing a minimum of $5,000 in direct financial losses, as stated in the announcement.
LaHiff is set to receive his sentence on March 20, 2024.
He could face a maximum penalty of 10 years in prison and fines of up to $250,000.
