Loading story…
Texas law-enforcement agencies arrested two Lamesa Independent School District employees following an investigation into alleged computer-security violations. Lamesa Police and Texas Rangers arrested 54-year-old Auerilo Garza on a charge of Criminal Responsibility for Conduct of Another, while the Martin County Sheriff’s Office arrested 40-year-old Gabriel Flores on a charge of Breach of Computer Security.
Lamesa ISD said the allegations did not involve the disclosure or compromise of district data, including student, personnel, or security information. Authorities have not publicly detailed the affected systems, technical method, scope of the alleged activity, or the status of the criminal cases.
See the reporting duties and controls this puts on the clock.
2 events from the most recent confirmed update back to the earliest known activity.
Lamesa ISD issued a Friday-morning press release on the arrests and stated that the allegations did not involve disclosure or compromise of student, personnel, or security information.
Law enforcement arrested Lamesa ISD employees Auerilo Garza, 54, in Lamesa and Gabriel Flores, 40, in Stanton following an investigation involving the Texas Rangers. Garza was charged with Criminal Responsibility for Conduct of Another, while Flores was charged with Breach of Computer Security.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Former Saydel Community School District IT employee **Ezekiel Dean Potter** was sentenced to **21 months in prison** after prosecutors said he carried out a prolonged cyber sabotage campaign against the Iowa district following his April 2023 termination. Authorities said Potter kept access to more than 300 district credentials and, from May 2023 through January 2025, used them to delete accounts, take down the district’s Facebook page, interfere with **Apple School Manager**, target **GoDaddy**, and compromise **Google/Gmail**, **PowerSchool Schoology**, and other school services. The intrusions locked teachers out of platforms, disrupted classrooms, and caused tens of thousands of dollars in losses, with reported direct costs exceeding **$73,000** and restitution set at **$59,668.81**. Investigators tied the activity to Potter through forensic evidence including IP addresses linked to later employers, activity traced despite VPN use, and a USB drive containing spreadsheets of district usernames and passwords. Potter pleaded guilty in January 2026 to computer fraud charges under the **Computer Fraud and Abuse Act** and was also ordered to serve supervised release with computer-use monitoring conditions.
Jun 29, 2026
LulzSec launched its first **Operation Anti-Security** disclosure by publishing a torrent of files stolen from the Arizona Department of Public Safety, saying the attack was meant to embarrass law enforcement and protest Arizona’s `SB1070` immigration law. The archive, titled **“Chinga La Migra!”**, reportedly contained border patrol, counter-terrorism, warrant, court, and internal email documents, including material referencing informants used to infiltrate gangs, cartels, motorcycle clubs, Nazi groups, and protest movements. Arizona DPS said the breach appeared authentic and temporarily disabled its website and webmail systems while investigating. The campaign expanded as Anonymous and AntiSec affiliates released additional data allegedly taken from Arizona DPS systems and the personal email accounts of Arizona police officers. Reports said the later dumps exposed sensitive personal information including Social Security numbers, passwords, addresses, voicemails, chat logs, and other private content tied to roughly a dozen officers, while Arizona authorities said ongoing investigations and other critical operational data were not compromised. The disclosures also highlighted weak password practices among affected officers and prompted a joint criminal investigation, as AntiSec supporters threatened further attacks on police and government targets.
Jun 29, 2026
Matthew Lane, a Massachusetts student, pleaded guilty and was later sentenced in a federal case tied to the breach of education software provider **PowerSchool**, an intrusion U.S. authorities described as the largest cyberattack in U.S. education history. Prosecutors said Lane used stolen contractor credentials and vulnerability-scanning tools to access the company’s network, then threatened to publish sensitive records unless he was paid about **$2.85 million in Bitcoin**. The compromised data reportedly covered roughly **60 million students** and **10 million teachers**, including names, phone numbers, addresses, Social Security numbers and, in some cases, medical information. Authorities said Lane also extorted a separate telecommunications company for **$200,000** by threatening to release customer data. The case triggered ransom payments and White House Situation Room briefings, and investigators later found that some stolen PowerSchool data was allegedly retained by another actor and reused in follow-on extortion attempts against school districts. Lane received a **four-year federal prison sentence** and was ordered to pay more than **$14 million in restitution**, while U.S. investigators continue pursuing alleged co-conspirators.
Jun 29, 2026