District says PowerSchool breach did not expose Social Security numbers; Experian monitoring offered

Rockingham County Schools told the board that the nationwide PowerSchool data breach accessed historical student and staff records but, according to the state report provided to the district, Social Security numbers were not among the data accessed in the district’s records.

Superintendent Dr. Stover reported that a contract employee’s interaction with a phishing email allowed the attacker access to PowerSchool for about nine days; the district received a state report enumerating which categories of data were accessed. "No Social Security numbers were accessed in the report that I received," Dr. Stover said. He added that PowerSchool is offering two years of Experian credit monitoring to anyone who may have been affected and has set up a call center and a sign‑up process for staff and families.

The superintendent urged employees and families to enroll in the offered monitoring and said the district will post updates on its website. He said the district switched to a new student information system (Infinite Campus) but noted the historical data were accessible through PowerSchool. State officials are reported to be seeking a longer monitoring period than the two years PowerSchool initially offered, and litigation has been filed in several jurisdictions against PowerSchool.

District staff said they will communicate log‑in and enrollment instructions to staff and families and will share state guidance as it becomes available.