PowerSchool data breach (2024-2025)
PowerSchool, a student information system vendor used by thousands of school districts, disclosed that attackers using stolen credentials accessed records of students and staff. In some cases, social security numbers were among the exposed data.
Districts notified families and offered credit monitoring; PowerSchool reportedly paid the threat actor to delete the stolen data.
The breach became a cautionary example of how one education vendor's security lapse can expose records across many districts at once.
Like the Instructure incident, PowerSchool shows that a single vendor breach can put staff and student data across many districts at risk, the same dynamic now facing Austin ISD.
