In early 2025, Matt Weiss, a former assistant football coach at the University of Michigan, was indicted on data breach charges related to hacking into the email accounts of thousands of individuals, including student-athletes. According to the U.S. Department of Justice, Weiss allegedly accessed private accounts across over 100 colleges and universities between 2015 and 2023.
Prosecutors say he was trying to steal intimate images and videos, primarily from female student-athletes. More than 3,000 people may have been affected, and the emotional toll has been devastating. As the case unfolds, it raises urgent questions about digital privacy, data security, and institutional accountability—especially considering evolving data privacy laws.
Key Facts About the Matt Weiss Data Breach and University Investigations
More than 50 women have now filed civil lawsuits against the former University of Michigan football coach, the university itself, its board of regents, and a third-party vendor. The lawsuits claim there was a widespread failure to safeguard sensitive personal information.
These suits cite a systematic breakdown in oversight and security, accusing the parties involved of failing to follow Michigan data privacy laws and federal standards. Plaintiffs describe lasting emotional distress, fear, shame, and ongoing anxiety—the direct result of an egregious invasion of privacy.
What’s more disturbing is that this wasn’t a random cyberattack. The lawsuits allege that the university and its partners had numerous opportunities to detect or prevent the misconduct but failed to act. Plaintiffs argue that these weren’t just technical oversights, but they were systemic failures that left hundreds, if not thousands, vulnerable to digital exploitation and what many now recognize as digital sexual assault.
This case is a powerful reminder that violations of privacy in the digital age don’t just live behind screens—they affect real people, with real lives, and real trauma.
What Laws Might Apply in This Case?
At the center of this scandal is a serious breach of digital privacy and cybersecurity. Several important laws may apply to this case, including:
- Computer Fraud and Abuse Act (CFAA): A federal law that criminalizes unauthorized access to computer systems, and a likely component of the Matt Weiss computer crimes charges.
- Michigan & Other States Cybercrime and Data Privacy Laws: States have specific statutes related to identity theft, unauthorized access, and misuse of personal data.
- Invasion of Privacy Laws: These allow victims to bring civil claims when their personal lives are exposed or exploited without consent.
- Title IX: Given that many of the victims were female student-athletes, there may also be Title IX implications tied to gender-based discrimination and institutional negligence.
This isn’t just a criminal matter. These acts may support civil claims for victims who have experienced psychological harm, reputational damage, and other long-term consequences. A data privacy law firm experienced in both invasion of privacy claims and institutional accountability can help survivors understand and assert their rights.
What This Means for Digital Privacy in 2025
The Matt Weiss case highlights a growing issue: our laws and institutions are often unprepared for digital threats that affect real lives in very personal ways. Hacking isn’t just about data—it’s about the people and how it could affect them.
In this case, the alleged actions could equate to digital sexual assault: the unauthorized access and theft of intimate images with the intent to exploit. It’s a stark reminder that violations of digital privacy can be just as traumatic as physical ones. Our current data privacy laws must evolve to address this new reality, and enforcement must catch up with the scale of the harm.
As more cases like this come to light, the need for stronger invasion of privacy laws and proactive accountability in educational institutions has never been more urgent.
Could You Be a Victim of Matt Weiss?
If you were a college athlete between 2015 and 2023—or believe your account may have been accessed—there are steps you can take. Our law firm is experienced in class-action lawsuits and is committed to helping individuals affected by digital privacy violations get the support and justice they deserve.
Your story matters. Your rights matter. We can help.
Confidential Consultations Available
Our Michigan-based firm offers secure and confidential case evaluations for anyone nationwide who may have been impacted by the Matt Weiss scandal at the University of Michigan, related incidents at other universities across the country, digital sexual assault, or other serious invasions of privacy.
You don’t have to navigate this alone.
Contact us today for a confident consultation with experienced data breach attorneys who care.