Federal prosecutors have charged former University of Michigan assistant football coach Matthew Weiss with hacking into student athlete databases across more than one hundred (100) colleges and universities, accessing the personal and medical data of approximately 150,000 individuals. Weiss, who served as the co-offensive coordinator for the University of Michigan’s football team and formerly worked with the NFL’s Baltimore Ravens, was indicted on twenty-four (24) counts, including unauthorized computer access and aggravated identity theft. The alleged unauthorized access occurred from 2015 to January 2023, targeting databases maintained by Keffer Development Services, also known as Athletic Trainer System. Weiss is accused of downloading personal information and medical records of athletes, hacking into over 2,000 athletes’ social media, email, and cloud storage accounts, and accessing additional accounts of students and alumni nationwide. Prosecutors highlight that Weiss primarily targeted female college athletes, selecting them based on school affiliation, athletic history, and physical characteristics, with the intent to obtain private photos and videos. He reportedly maintained notes on these individuals and revisited breached accounts over time. Weiss allegedly cracked password encryptions and exploited authentication vulnerabilities to gain elevated access typically reserved for trainers and athletic directors. The indictment reveals that Weiss used internet research to crack passwords and leveraged data breaches to find athletes’ login information. Weiss faces significant legal consequences, with potential sentences of five years for each hacking charge and two years for each identity theft charge. The University of Michigan, which terminated Weiss’s employment following a review, has directed inquiries to the Justice Department. The FBI Detroit Cyber Task Force and the University of Michigan Police collaborated closely on the investigation.