PowerSchool’s Data Debacle: When School Safety Gets a Failing Grade
PowerSchool is alerting folks in the U.S. and Canada about a December cyberattack that swiped sensitive data from their PowerSource portal. Despite the alarm, the education giant hasn’t revealed exactly how many individuals were impacted by the PowerSchool cyberattack. Meanwhile, investigators are still piecing together the puzzle.

Hot Take:
PowerSchool has officially entered the “cyberattack hall of fame,” not for their transparency, but for perfecting the art of “What breach? Oh, that breach!” With the number of affected individuals still a mystery, their approach is like telling students there’s a pop quiz but refusing to reveal the subject. And as for the overdue CrowdStrike report? Let’s just say it’s fashionably late, arriving whenever it decides to make an entrance, possibly on a red carpet. Meanwhile, PowerSchool’s new curriculum: “How to handle a data breach 101: Deny, Delay, Deflect.”
Key Points:
- PowerSchool suffered a significant cyberattack in December 2024, affecting customer support portals.
- The breach resulted in stolen data from 6,505 school districts, exposing sensitive information.
- Threat actors claim the data of over 62 million students and 9 million teachers was stolen.
- PowerSchool has begun notifying affected individuals but is yet to disclose the full scale of the breach.
- Free identity theft protection and credit monitoring are offered to affected students and teachers.