PowerSchool

A cyberattack on PowerSchool, a leading education software platform, resulted in the exfiltration of personal data of 62 million students and 9 million teachers. Despite paying the ransom, the data was not wiped, and hackers are now targeting individual schools using the stolen information. The breach affected over 6,500 school districts in the US and Canada. The exfiltrated data includes Social Security Numbers, names, addresses, and medical information. PowerSchool has offered free credit monitoring and identity theft protection to mitigate risks.

Source: https://www.techradar.com/pro/security/powerschool-hackers-return-and-may-not-have-deleted-stolen-data-as-promised

TPRM report: https://scoringcyber.rankiteo.com/company/powerschool-group-llc

"id": "pow221051225",
"linkid": "powerschool-group-llc",
"type": "Ransomware",
"date": "5/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': ['62 million students',
                                               '9 million teachers',
                                               '6,500 school districts'],
                        'industry': 'Education',
                        'location': 'US and Canada',
                        'name': 'PowerSchool',
                        'type': 'Education Software Platform'}],
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': ['62 million students',
                                               '9 million teachers'],
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers',
                                              'names',
                                              'addresses',
                                              'medical information']},
 'description': 'A cyberattack on PowerSchool, a leading education software '
                'platform, resulted in the exfiltration of personal data of 62 '
                'million students and 9 million teachers. Despite paying the '
                'ransom, the data was not wiped, and hackers are now targeting '
                'individual schools using the stolen information. The breach '
                'affected over 6,500 school districts in the US and Canada. '
                'The exfiltrated data includes Social Security Numbers, names, '
                'addresses, and medical information. PowerSchool has offered '
                'free credit monitoring and identity theft protection to '
                'mitigate risks.',
 'impact': {'data_compromised': ['Social Security Numbers',
                                 'names',
                                 'addresses',
                                 'medical information'],
            'identity_theft_risk': 'High'},
 'ransomware': {'data_exfiltration': True,
                'ransom_demanded': True,
                'ransom_paid': True},
 'response': {'remediation_measures': ['Free credit monitoring',
                                       'Identity theft protection']},
 'title': 'Cyberattack on PowerSchool',
 'type': 'Data Breach, Ransomware'}