Failures in cybersecurity practices at a software company that helps federal agencies manage investigations and FOIA requests allowed two convicted hackers to delete databases, according to internal documents.

On Wednesday, the Justice Department said that 19-year-old Matthew D. Lane of Sterling, Massachusetts, had entered into a plea agreement for his role in a number of high-profile hacking episodes. The former college student pled guilty to charges related to cyber extortion, as well as aggravated identity theft, and other crimes.

A Massachusetts man has agreed to plead guilty to hacking into one of the top education tech companies in the U.S. and stealing tens of millions of schoolchildren’s personal information for profit.