{"id":55830,"date":"2020-09-03T16:53:00","date_gmt":"2020-09-03T23:53:00","guid":{"rendered":"https:\/\/www.theaegisalliance.com\/?p=55830"},"modified":"2026-10-02T22:40:10","modified_gmt":"2026-10-03T05:40:10","slug":"florida-teenager-accused-of-cyberattacking-schools","status":"publish","type":"post","link":"https:\/\/theaegisalliance.com\/zh-cn\/2020\/09\/03\/%e8%a2%ab%e6%8e%a7%e7%bd%91%e7%bb%9c%e6%94%bb%e5%87%bb%e5%ad%a6%e6%a0%a1%e7%9a%84florida%e9%9d%92%e5%b0%91%e5%b9%b4\/","title":{"rendered":"Miami-Dade Teen Who DDoS&#8217;d Virtual School Got Probation While a $15.3 Million K12 Contract Was Never Fully Signed"},"content":{"rendered":"<p><strong>MIAMI, FLORIDA \u2014<\/strong> The only person Miami-Dade County ever put in front of a judge for the cyberattacks that wrecked the first week of pandemic school was a 16-year-old junior at South Miami Senior High. He admitted eight distributed-denial-of-service attacks. He told a judge it was a mistake. He received a year of probation and 30 hours of community service. The $15.3 million learning platform he helped knock over was never fully signed, the company behind it wrote a $1.57 million check to the superintendent\u2019s foundation before the contract was executed, and the man who ran the district later left for Los Angeles and resigned there on June 21, 2026, while the FBI was looking at a different vendor deal entirely.<\/p>\n<p>Those are four different facts. They share a building. Treating the teenager as the whole story is how a school district hides a purchasing failure inside a police blotter.<\/p>\n<h2>Eight attacks, and a name the public never got<\/h2>\n<p>Classes for the 2020-21 year opened on August 31 with more than 270,000 students pointed at a product called My School Online, sold by K12. Teachers could not log in. Rosters vanished. Parents filled the school board\u2019s inbox. Miami-Dade Schools Police Chief Edwin Lopez said the district would not rest until everyone involved was caught and brought to justice. Superintendent Alberto Carvalho called it \u201cdisheartening that one of our own students has admitted to intentionally causing this kind of disruption.\u201d<\/p>\n<p>The student, then 16, was charged with using a computer in an attempt to defraud, a third-degree felony that can mean five years if a prosecutor moves the case to adult court, and with misdemeanor interference with an educational institution. His name stayed sealed because he was a minor. Detectives worked with the FBI, the Secret Service, and the Florida Department of Law Enforcement. The district said the servers were not breached and no student records were taken. Carvalho told the board that some of the traffic looked as if it came from Russia, Ukraine, China, and Iraq, and he also said a rented denial-of-service tool does not prove a foreign government was behind a teenager\u2019s mouse.<\/p>\n<p>A DDoS attack is a blunt instrument. It does not steal files. It hires or hijacks a crowd of machines and has them knock on one door until the door stops answering. Justin Cappos, a computer scientist at New York University who looked at the failure, pointed at outdated software and at capacity the district was already struggling to provide before any student pressed a button. Police later said the teenager orchestrated no fewer than eight of at least two dozen attacks that hit the opening days. Attacks continued after his arrest. So did the crashes that had nothing to do with him, including a Cisco switch the district blamed for the first morning and trouble on the Comcast side of the pipe.<\/p>\n<p><iframe loading=\"lazy\" title=\"Cyber Attack Disrupts Virtual Learning for Miami-Dade\" width=\"500\" height=\"281\" src=\"https:\/\/www.youtube.com\/embed\/7oFD49tmXdQ?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<p>On March 12, 2021, the student, by then 17 and no longer at South Miami Senior High, stood in front of Circuit Judge Yery Marrero. \u201cAll of this was a mistake,\u201d he said. \u201cI didn\u2019t mean to cause harm.\u201d Prosecutors never charged him as an adult. The Miami Herald reported the sentence: one year of probation, 30 hours of community service, no jail. A child who rented a tool the internet sells to bored people received the punishment the statute treats as a juvenile error. The adults who had bet the fourth-largest school district in the country on an unsigned contract received an inspector general\u2019s memo.<\/p>\n<h2>The contract that was never finished<\/h2>\n<p>K12\u2019s deal was a $15.3 million no-bid arrangement. Chief Financial Officer Ron Steiger told the board the system was failing while teachers were still trying to take attendance on it. Carvalho had not even fully executed the contract when the school year began. After a meeting that ran about 13 hours and drew some 400 speakers, the board killed the K12 platform in the early hours of September 10, 2020. Grades 6 through 12 went back to Zoom and Microsoft Teams. The universal online system the district had promised the county was gone before the second full week of school.<\/p>\n<div class=\"embed-x\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">We, at Miami Dade county, fought this guy so hard on Masks during the Plandemic\u2026Always wanting to silence and go over parents wishes\u2026 we were not even allowed inside the School Board Meeting. We protested outside. He also paid 15M for a program called K12 that was a disaster.<\/p>\n<p>&mdash; Jessy Rodriguez (@jessyr0102) <a href=\"https:\/\/x.com\/jessyr0102\/status\/2027060009943646501?ref_src=twsrc%5Etfw\">February 26, 2026<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script><\/div>\n<\/p>\n<p>The check is the part that outlasted the outage. On the eve of the launch, with the contract still hanging, Carvalho solicited a donation from K12 for the Foundation for New Education Initiatives, the nonprofit he had started in 2008 when he was an assistant superintendent. K12 Florida, LLC sent $1.57 million. The money hit the foundation\u2019s account on September 8, 2020, days before the board scrapped the product. The pitch was $100 gift cards for teachers who had been fighting the software on overtime. The Miami-Dade schools inspector general, Felix Jimenez, opened a review on September 16, 2020, file IG-20-0008-SI.<\/p>\n<p>The <a href=\"https:\/\/www.miamidade.gov\/resources-oig\/pdf\/2021-MDCPS\/2021-06-29-review-K12-foundation-new-education-initiatives.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">final report, dated June 29, 2021<\/a>, found no actual violation of the state ethics code or of school board conflict rules, and it did not accuse anyone of pocketing the money. It did say this, in the sentence that matters: \u201cThere is no doubt that this solicitation for gifts totaling over $1.5 million \u2014 on the eve of the temporary K12 LMS (learning management system) go-live and with an unsigned contract hanging over it \u2014 created an appearance of impropriety.\u201d The inspector general told the foundation to give the money back. District spokeswoman Daisy Gonzalez-Diego said the report showed the actions were legal and aimed at students and teachers. In July 2021 the foundation kept the $1.57 million and said it would still reach teachers. K12, by then, had changed its name.<\/p>\n<p><iframe loading=\"lazy\" title=\"Changes In Online Learning For Miami-Dade County Public Schools\" width=\"500\" height=\"281\" src=\"https:\/\/www.youtube.com\/embed\/BljKwZuwY3E?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<h2>The company renamed itself. The superintendent changed cities.<\/h2>\n<p>K12 Inc. became Stride, Inc. in December 2020. The Florida subsidiary\u2019s sole member was K12 Management, Inc., itself under Stride. Nathaniel Davis was the executive on the other end of the Miami-Dade relationship. The failed platform did not end the company. Stride kept selling virtual schooling in other states. The teenager\u2019s probation clock ran out. The unsigned contract became a line in an inspector general PDF that almost nobody assigned in a civics class.<\/p>\n<div class=\"embed-x\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Miami-Dade Schools Chief Alberto Carvalho, K12 Defend Donation To Foundation <a href=\"https:\/\/t.co\/e08oZ6zzhq\">https:\/\/t.co\/e08oZ6zzhq<\/a><\/p>\n<p>&mdash; CBS Miami (@CBSMiami) <a href=\"https:\/\/x.com\/CBSMiami\/status\/1307268454676942848?ref_src=twsrc%5Etfw\">September 19, 2020<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script><\/div>\n<\/p>\n<p>Carvalho left Miami-Dade in 2022 to run the Los Angeles Unified School District, the nation\u2019s second-largest system. That job ended on a different scandal. On June 21, 2026, he resigned, effective the same day, after four months under FBI investigation tied to a collapsed artificial-intelligence chatbot venture with a company called AllHere. Agents had searched his district office and homes in San Pedro and in Florida. \u201cPlacing students first has always guided my work,\u201d he wrote. \u201cBecause I believe our schools must remain focused on students and learning without distraction, I am resigning as Superintendent of LAUSD effective today, June 21, 2026.\u201d The Los Angeles Times reported the departure. Three days later the board gave the permanent job to acting superintendent Andr\u00e9s Chait. None of that is a prosecution for the 2020 denial-of-service attacks. It is the second time a Carvalho purchasing relationship with an education vendor blew up in public, and the second time the criminal file, if there is one, is not about the student who clicked the button.<\/p>\n<p>The useful question is which failure was harder to commit. A junior with a downloadable stresser tool can darken a login page for an hour. A superintendent can point the fourth-largest school district in the country at software the board has not finished buying, collect a seven-figure donation from the seller for his own foundation, and still be the person who gets to call the student disheartening. Miami-Dade\u2019s police chief promised the public that every attacker would be caught. The record shows one child, a probation term, and a platform that was already falling over from a Cisco switch, a capacity problem, and a contract nobody had signed.<\/p>\n<p>Denial-of-service tools have only gotten cheaper since that week. School districts still sign emergency technology deals when a classroom has to move online overnight, and they still discover, afterward, that the emergency was also a sales opportunity. The AEGIS Alliance has tracked that pattern in <a href=\"https:\/\/theaegisalliance.com\/2025\/12\/17\/shinyhunters-breach-pornhub-premium-data-and-demand-ransom\/\">later breach reporting<\/a> and in <a href=\"https:\/\/theaegisalliance.com\/2026\/01\/31\/google-dismantles-a-shadow-network-that-secretly-used-your-phones-internet\/\">the proxy networks that turn ordinary phones into traffic<\/a>. The Miami-Dade week remains the cleanest local example of the split: the kid got a docket number, and the invoice survived.<\/p>\n<p>Related from The AEGIS Alliance: the <a href=\"https:\/\/theaegisalliance.com\/2020\/08\/12\/florida-police-place-8-year-old-boy-in-handcuffs\/\">Key West 8-year-old<\/a>, later <a href=\"https:\/\/theaegisalliance.com\/2025\/12\/17\/shinyhunters-breach-pornhub-premium-data-and-demand-ransom\/\">cybercrime reporting<\/a>, and <a href=\"https:\/\/theaegisalliance.com\/category\/news\/us-news\/\">U.S. News<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A South Miami Senior High junior admitted eight DDoS attacks that froze Miami-Dade&#8217;s virtual opening. He got probation. The unsigned K12 deal and a $1.57 million foundation check did not.<\/p>\n","protected":false},"author":1,"featured_media":55851,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22,21,24],"tags":[188262,197333,3672,192022],"class_list":["post-55830","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacker-news","category-news","category-us-news","tag-florida","tag-florida-man","tag-hacker","tag-hacker-news"],"jetpack_featured_media_url":"https:\/\/theaegisalliance.com\/wp-content\/uploads\/photo-of-laptop-teenager-accused-of-cyberattacking-miami-dade-florida-schools.jpg","_links":{"self":[{"href":"https:\/\/theaegisalliance.com\/zh-cn\/wp-json\/wp\/v2\/posts\/55830","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/theaegisalliance.com\/zh-cn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/theaegisalliance.com\/zh-cn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/theaegisalliance.com\/zh-cn\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/theaegisalliance.com\/zh-cn\/wp-json\/wp\/v2\/comments?post=55830"}],"version-history":[{"count":5,"href":"https:\/\/theaegisalliance.com\/zh-cn\/wp-json\/wp\/v2\/posts\/55830\/revisions"}],"predecessor-version":[{"id":1203991,"href":"https:\/\/theaegisalliance.com\/zh-cn\/wp-json\/wp\/v2\/posts\/55830\/revisions\/1203991"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/theaegisalliance.com\/zh-cn\/wp-json\/wp\/v2\/media\/55851"}],"wp:attachment":[{"href":"https:\/\/theaegisalliance.com\/zh-cn\/wp-json\/wp\/v2\/media?parent=55830"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/theaegisalliance.com\/zh-cn\/wp-json\/wp\/v2\/categories?post=55830"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/theaegisalliance.com\/zh-cn\/wp-json\/wp\/v2\/tags?post=55830"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}