accounts on social media.
Weiss also “exploited vulnerabilities in universities’ account authentication process to gain access to the accounts of students or alumni.” Michigan and Westmont College are the only schools named as having students or alumni whose information was accessed.
Keffer Development Services, which also goes by the name Athletic Trainer System, did not respond to requests for comment.
The Pennsylvania-based software company runs a platform that allows trainers to document injuries to thousands of athletes at the high school and college level. It claims to be compliant with several federal data security regulations, including HIPAA and FedRUAMP. Keffer says it works with 600 organizations across 48 states.
Weiss was charged with 14 counts of unauthorized access to computers and 10 counts of aggravated identity theft. He faces five years maximum for each hacking charge and two years for each identity theft charge.
“Our office will move aggressively to prosecute computer hacking to protect the private accounts of our citizens,” Beck said.
Cheyvoryea Gibson, Special Agent in Charge of the FBI in Michigan, added that the FBI Detroit Cyber Task Force worked closely with the University of Michigan Police Department on the case.
The University of Michigan declined to comment on the indictment, directing all questions to the Justice Department. The university also shared a statement from 2023 when they announced the firing of Weiss.
“After a review of University policies, the athletic department has terminated the appointment of co-offensive coordinator/quarterbacks coach Matt Weiss. Consistent with university policy, we will have no further comment on this personnel matter,” the spokesperson said.
