PowerSchool breach worse than thought, company says “all” student and teacher data accessed


  • Threat actors gained access to the PowerSchool student information system and stole student and teacher data in December 2024
  • Several companies confirmed that all data covering as long as they had been using PowerSchool was taken
  • The data was allegedly deleted by the hackers

The latest cyber attack on education technology software company PowerSchool appears to be much worse than first thought as several companies came forward to say that all of their data was stolen in the incident.

In late December 2024, an unidentified threat actor used stolen credentials to access its PowerSchool Student Information System (SIS) platform. From there, they were able to use the “export data manager” customer support tool to exfiltrate the “Students” and “Teachers” database tables into a CSV file, which was then stolen.

Leave a Comment

Your email address will not be published. Required fields are marked *