Cabarrus schools confirm PowerSchool data breach affected district records; details pending
Loading...
Summary
Cabarrus County Schools confirmed that some teacher and student data hosted by PowerSchool was compromised in a broader supply-chain breach announced by PowerSchool. The district said it is working with PowerSchool and the state Department of Public Instruction and will notify affected individuals when more details are available.
Cabarrus County Schools officials told the board on Jan. 13 that a cybersecurity incident affecting PowerSchool — the student information system used across the state — compromised files that include district teacher and student data.
Chief information official Carl Sain briefed the board, saying PowerSchool notified North Carolina Department of Public Instruction in mid‑week and that the company has said the compromised data “was not shared and that it has been contained and destroyed.” Sain said the breach stemmed from stolen credentials at PowerSchool’s corporate environment; he added that “PowerSchool has additionally confirmed that there were no actions that Cabarrus County Schools nor NCDPI could have taken to prevent this security incident.”
The district confirmed it has received formal notice that teacher and student records for the district were among the globally affected files. Sain said the district does not yet have a complete list of the individuals or which specific data fields were accessed and is awaiting PowerSchool and NCDPI analysis before issuing notifications to impacted individuals.
Sain said the district notified current staff and families via ParentSquare and set up an information email for questions; the district’s published contact is info@cabarrus.k12.nc.us. He said the district will follow required state and federal notification rules once PowerSchool completes its analysis.
Board member Pam Escobar asked whether PowerSchool has offered credit monitoring services; Sain replied PowerSchool has indicated it will offer such services to impacted parties and the district will communicate specifics once it receives more detail. Sain and other district staff said they would post updates to the district website and a dedicated page linking to resources and any credit-monitoring offers as information becomes available.
Sain said that earlier communications from the state indicated the breach affected nearly every district in the state and several other countries. He urged families to use the district’s email contact and said the district may need to reach former students or staff if their records are identified in PowerSchool’s analysis.
No specific remediation or mitigation steps beyond coordination with PowerSchool and NCDPI were announced at the meeting; district staff said they would update the board and community as new information becomes available.
