UCD lecturer appears in court on 148 charges over alleged student data hacking

Assistant professor faces 148 charges including alleged hacking of student accounts and harassment of dozens of victims

Stephen Davis allegedly harassed about 50 students, and the case involves overall more than 100 victims, Dublin District Court heard on Friday. Picture: Collins Courts

A university archaeology lecturer has appeared in court charged with more than 140 offences, including alleged hacking of students’ personal data and harassment.

Stephen Davis, an assistant professor at University College Dublin, aged 53, is accused of using "a piece of software to steal students' passwords and access their accounts".

Mr Davis, of Elgin Wood, Killarney Road, Bray, Co Wicklow, allegedly harassed about 50 students, while the case involves more than 100 alleged victims, Dublin District Court heard on Friday.

The prosecution follows a Garda National Cyber Crime Bureau probe, which began in 2023, into the use of malicious software (malware).

The academic faces a total of 148 charges, including multiple counts of harassment, as well as alleged breaches of sections 2 and 8(1) of the Criminal Justice (Offences Relating to Information Systems) Act 2017.

According to the information systems-related offences, it is alleged that he "did without lawful authority or reasonable excuse, intentionally access an information system by infringing a security measure".

The offences are said to have taken place at various locations, including the UCD campus in Belfield, Donnybrook, Dublin 4; an office at the university; and his home address, on dates throughout 2023.

He did not address the court and has yet to enter a plea.

There was no objection to bail, the terms of which had been agreed, defence counsel Noah Rossiter informed Judge Gerard Jones.

The Director of Public Prosecutions has directed that he face trial on indictment in the Circuit Court, which, on conviction, has broader sentencing powers.

Judge Jones granted an adjournment to allow prosecutors to complete a book of evidence, which must be served on the accused before he is returned for trial to the higher court.

He was ordered to appear again in the District Court on July 24.

Detective Garda Colin Noonan told Judge Jones that the accused was arrested at his home address at 7.21am.

The court heard Mr Davis was cautioned and indicated he understood the caution and the reason for his arrest. He was charged with 148 offences.

Detective Garda Noonan added that the accused faces 51 charges of harassment under section 10 of the Non-Fatal Offences Against the Person Act and 96 charges of unlawfully accessing an information system.

A further charge relates to the alleged unlawful use of software to access an information system.

Mr Rossiter, instructed by solicitor Barry Maloney, said that his client has surrendered his passport.

Following further queries from the judge, Detective Garda Noonan alleged that the case involved UCD campus accounts and the "use of a piece of software to steal students' passwords and access their accounts".

The more serious charges relate to the nature of personal material allegedly obtained.

Judge Jones ordered him to sign on twice a week at his local garda station and to remain away from the library in Bray.

Judge Jones noted that the detective agreed the accused had cooperated with the investigation. The officer added that Mr Davis remains employed by UCD.

Cashless bail was set at €100.

Mr Rossiter said the defence was reserving its position on applying for legal aid.