PowerSchool
Disclosed Jan 7, 20251 year agoConfirmed
Hacker steals K-12 student and teacher records from PowerSchool SIS
A hacker used a compromised support credential to access PowerSchool's PowerSource portal and export data from customer school information systems; prosecutors said the data of more than 60 million students and 10 million teachers was taken. PowerSchool paid the extortionist, but school districts were later extorted again.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jan 7, 2025 |
| Discovered | Dec 28, 2024 |
| Attack | Hacking |
| Data exposed | Names, Addresses, Phone numbers, Emails, Dates of birth, Social Security numbers, Health, Education records, Children's data |
| Sector | Education · US |
| Status | Confirmed |
| Lawsuit or fine | Texas AG lawsuit (2025); hacker Matthew Lane pleaded guilty (2025) |
Sources
| Source | |
|---|---|
| Edtech giant PowerSchool says hackers accessed personal data of students and teacherstechcrunch.com · News | News |
| Hacker accessed PowerSchool's network months before massive December breachtechcrunch.com · News | News |
| US student agrees to plead guilty to hack affecting tens of millions of studentstechcrunch.com · News | News |
| Vermont Attorney General: 2025-01-27 PowerSchool Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jan 7, 2025 | |
| Vermont AGresidents of VT | Jan 27, 2025 |
History of this record
- 2026-09-25 · source_type: press to official · backfill source
- 2026-09-25 · source_url: https://techcrunch.com/2025/01/08/edtech-giant-powerschool-says-hackers-accessed-personal-data-of-students-and-teachers/ to https://ago.vermont.gov/document/2025-01-27-powerschool-data-breach-notice-consumers · backfill source
- 2026-09-25 · status: disclosed to confirmed · backfill source
- 2026-09-25 · verified_by: empty to vt-ag · backfill source
- 2026-09-25 · verified: 0 to 1 · backfill source
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Vermont AG. Record counts are as reported. Not legal advice.