Education technology company PowerSchool recently faced a significant cyberattack, with a hacker claiming to have stolen the personal data of 62.4 million students and 9.5 million teachers. PowerSchool, a cloud-based software provider for K-12 schools and districts, revealed that the breach occurred through unauthorized access using stolen credentials, allowing the attacker to exploit the company’s PowerSource customer support portal. This access enabled the download of sensitive data from PowerSIS databases, including Social Security Numbers, medical information, and grades for some students. In response to the breach, PowerSchool paid a ransom to prevent the stolen data from being leaked, as the hacker provided a video claiming the data’s deletion. Despite this, PowerSchool has not disclosed specific figures regarding the breach’s impact, leading to frustration among stakeholders. Sources indicate that the attack affected students and teachers across 6,505 school districts in the US, Canada, and other countries. Some of the largest impacted districts include Toronto District School Board, Peel District School Board, and Dallas Independent School District. PowerSchool highlighted that the scope of exposed data varies by district due to differing policy requirements. The company assured that less than a quarter of affected students had their Social Security Numbers exposed. PowerSchool is offering two (2) years of free identity protection and credit monitoring services for all impacted individuals, regardless of whether sensitive information like Social Security Numbers was compromised. The company is also coordinating with state attorneys general to notify affected parties. PowerSchool has updated its customer-only FAQ and established a public website for ongoing updates regarding the breach. The company remains committed to supporting the affected students, teachers, and families during this time.