In a stark reminder of the potential havoc a disgruntled employee can wreak, a former public school IT manager has admitted to causing significant damage to his old high school's computer network. Conor LaHiff, 30, of Ayer, pled guilty to a cyberattack that left the Essex County institution reeling, according to a statement released by the U.S. Attorney's Office.
After receiving the boot from his role at the unnamed high school in June, the revenge-bent techie used his remaining administrative access to sabotage the school's systems. The (now former) IT manager went on a digital rampage, deactivating and deleting thousands of accounts connected to the school's operations—a total of over 1,400 Apple accounts and additional administrative credentials were hit. His handiwork also led to a 24-hour blackout of the school's telephone service.
LaHiff's guilty plea specifically addressed one count of causing unauthorized damage to protected computers. His sentencing is set for March 20, 2024, with Chief U.S. District Court Judge F. Dennis Saylor IV presiding. Under the current terms of release, LaHiff must inform any future employers of the guilty plea, a condition imposed after it came to light that he had snagged a similar role at another public high school post-termination.
Caught in a web of legal trouble, LaHiff faces potential penalties that include up to a decade behind bars, three years of supervised release, and hefty fines—up to $250,000 or double the gross loss caused by his actions. "The charge of unauthorized damage to protected computers provides for a sentence of up to 10 years in prison, up to three years of supervised release and a fine of $250,000 or twice the gross gain or loss," detailed the U.S. Attorney's Office.
The investigation drew on the expertise of the Massachusetts State Police and the Haverhill Police Department. Acting United States Attorney Joshua S. Levy and Special Agent in Charge Jodi Cohen of the FBI's Boston Division announced the guilty plea, and Assistant U.S. Attorney Mackenzie A. Queenin of the Securities, Financial, and Cyber Fraud Unit is handling the prosecution.
