Ex-UM Coach Accused Of Hacking Female Athletes' Accounts In Class Action Lawsuit

Case Overview: A class action lawsuit alleges a former University of Michigan coach illegally accessed and stole private data from student-athletes' accounts, with the university and a vendor accused of enabling the breach.

Consumers Affected: Female student-athletes at the University of Michigan whose data was allegedly accessed without authorization.

Court: U.S. District Court for the Eastern District of Michigan

University of Michigan student-athletes have filed multiple class action lawsuits against former assistant football coach Matthew Weiss, accusing him of illegally accessing private data belonging to female athletes nationwide. 

The latest lawsuit, like one filed earlier this month, alleges Weiss used his position to hack into student accounts, steal intimate photos and conversations, and keep detailed notes on victims for personal use.

The legal action follows Weiss’ March indictment on 14 counts of unauthorized computer access and 10 counts of aggravated identity theft, The Detroit News reports. The lawsuit also names the University of Michigan, its board of regents, and data vendor Keffer Development Services, arguing they failed to implement security measures that could have prevented the massive breach.

Former UM Coach Accused of Stealing Athlete Data

The latest lawsuit, filed by a UM junior, expands on allegations made by two former student-athletes—a gymnast and a soccer player—who previously sued the university for its role in enabling Weiss' misconduct. 

According to the complaint, Weiss exploited weak security systems to access university databases, email accounts, social media, and cloud storage, targeting over 3,300 student-athletes between 2015 and 2023.

Weiss allegedly sought out female athletes, downloading personal photos and videos while tracking victims’ physical characteristics and personal details over time. The plaintiffs claim UM and Keffer knew about vulnerabilities but took no meaningful action, failing to monitor Weiss’ activities or protect student data.

The student-athlete leading the latest lawsuit said she was devastated to learn her private information had been compromised. The complaint details her emotional distress, including fear, humiliation, and loss of dignity, as a result of Weiss’ actions and the university’s failure to safeguard student data.

Lawsuit Details Years of Alleged Unauthorized Access

Weiss’ alleged misconduct spanned nearly a decade while he worked as an assistant coach under Jim Harbaugh. With broad, unmonitored access to sensitive university data, he is accused of systematically hacking and stealing personal content from female students.

Federal prosecutors claim Weiss repeatedly searched for images of the same victims over the years, using their athletic history and physical features as filters. The lawsuit further alleges he used stolen student data to crack passwords and gain deeper access to personal accounts.

Clarkson Law Firm, representing the plaintiff in the latest lawsuit, blasted UM for its inaction. Attorney Timothy Giordano called the university’s negligence "an unforgivable dereliction of duty," while lawyer Bryan Thompson said the institution "essentially allowed Weiss to engage in predatory behavior for eight years."

With more than 150,000 student-athletes' data still held by UM and Keffer, the lawsuit argues that students remain at risk. The plaintiffs seek accountability from the university and its data vendor, demanding stronger cybersecurity protections and justice for those affected by Weiss’ alleged crimes.

Other Privacy Invasion Lawsuits

Cases of privacy invasion and data misuse are not rare. In December, Royal Caribbean Cruises faced a class action lawsuit after allegations surfaced that a stateroom attendant placed hidden cameras in guest bathrooms aboard the Symphony of the Seas. The lawsuit, filed by lead plaintiff Jane Doe, claims that up to 960 passengers may have been affected between December 2023 and February 2024.

Another lawsuit targets the online therapy platform BetterHelp, accusing the company of failing to provide qualified therapists and violating patient trust by improperly sharing data. Plaintiffs claim that BetterHelp misled vulnerable users, prioritizing profits over their mental health.

Meanwhile, ride-hailing giant Uber has been ordered by a federal judge to disclose safety report data in an ongoing multidistrict litigation (MDL) concerning sexual assault and harassment by its drivers. Plaintiffs allege that Uber ignored the widespread problem and failed to implement proper safeguards for passenger safety.

The latest lawsuit against Weiss seeks accountability for his alleged misconduct and calls for sweeping changes in how the University of Michigan handles student data. The plaintiff, a junior at UM, has suffered fear, anxiety, and humiliation as a result of the breach. She and others affected are demanding improvements in cybersecurity, safety protocols, and notification processes for data breaches. Damages will be determined at trial.

What do you think about the University of Michigan's handling of this situation? Share your thoughts below.