Joseph Camp, 26, and Daniel Fowler, 21, of Kansas City, Mo. are also accused of attempting to steal university funds, infecting numerous university computers with a they developed and using their accounts to threaten potential witnesses against them. The charges carry possible prison terms of between two and 10 years.

The seven-count indictment was unsealed Monday upon Fowler's arrest and initial court appearance. Camp has been in custody in New York for about a year on unrelated charges and will be transferred to Kansas City to face charges in related to the UCM hacking, a spokesman for the U.S. Attorney's Office for the Western District of Missouri said.

In addition to the charges in Kansas City, Camp will also face charges in New York in connection with his attempt to sell stolen UCM data there, the spokesman said.

According to the indictment, Camp and Fowler launched their attacks during last year's fall semester when both were students at the school. The duo used Fowler's room as their base and over a three-month period between October and December 2009 broke into numerous university databases and computers -- including one belonging to a university administrator.

The pair developed a computer virus with which they infected systems used by UCM students, faculty and staff. They even tried unsuccessfully to infect a system being used by the university president. In most cases, they infected the computers by convincing the owner to insert an infected USB thumb drive into their system. At other times, the two sent e-mails with an attachment containing the virus