Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Powerschool Breach topic
No spam. Unsubscribe anytime.
PCSD outlines response after PowerSchool breach that exposed student and staff tables
Summary
District staff told trustees the PowerSchool vendor reported an international-scale breach in late December affecting tables for every student and teacher; the district and SCDE are coordinating notifications and will provide resources and monitoring as provided by PowerSchool.
District staff informed the board that PowerSchool, the statewide student information vendor, reported a security incident in late December that allowed an unauthorized party access to tables containing data for every student and teacher since adoption of the platform.
The staff update noted PowerSchool had engaged the FBI and that the State Department of Education (SCDE) was treating the matter as a full breach. The district said it immediately implemented recommended mitigation steps and notified school leaders; the SCDE has prepared communication packets and PowerSchool indicated it would provide resources including credit monitoring for affected families and staff.
A district representative said the greatest fear is access to personally identifiable information and stressed the vendor’s commitment to provide monitoring and support ‘‘consistent with the security laws and regulations and procedures across the country.’’ The district is tracking SCDE guidance and will continue to update schools and families.
The board was told a webinar with PowerSchool CEO Hardeep Gulati offered suggested immediate steps, and the district joined a SCDE-hosted superintendent briefing that coincided with the board meeting.
The district emphasized this was a vendor system breach, not a district or state system intrusion, and encouraged trustees to note the difference when describing impacts.
Next steps: the district will continue coordination with SCDE, provide updates to families when guidance and vendor resources become available, and track any required notifications with the attorney general’s office and SLED as appropriate.
