Keith Wesley Cosbey, CFO of California school lunch provider Choice lunch, was arrested in April on two felony counts — identity theft and unlawful computer access. The San Francisco Chronicle reports that law enforcement accuses Cosbey of hacking into the network of longtime Choice lunch rival The Lunch Master, accessing sensitive student data including names, grades, meal preferences, and allergy info.
The charges contend that Cosbey, claiming to be an anonymous tipster, then sent the stolen data to the California Department of Education in an attempt to discredit The Lunch Master by exposing weak security and complaining the company does not do enough to protect student data.
When the Department of Education confronted The Lunch Master about the breach, the company launched an internal investigation. The Lunch Master cyber security team was able to trace the breach back to an IP address in Danville, Calif., where Choice lunch is based. The Lunch Master contacted the FBI in April 2018, and after a yearlong investigation, Cosbey was arrested.
Cosbey is currently out on $125,000 bond and is due in court later this month. If convicted, he faces over three years in prison. This week, investigators allowed Lunch Master to notify families affected by the breach, which the company has been doing, The Chronicle reported.