Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Data Privacy topic
No spam. Unsubscribe anytime.
District hears proposal to join nationwide PowerSchool breach litigation
Summary
An outside attorney told the Fountain Hills Unified board that a large PowerSchool breach may have exposed millions of student and staff records; the board agreed to place consideration of joining consolidated litigation on the next action agenda after questions about scope, staff time and timing.
An attorney representing a plaintiffs group briefed the Fountain Hills Unified School District board on April 2 about proposed litigation over a widespread PowerSchool data breach and urged the district to consider joining a consolidated case. William Schnapp of the Franks Law Group told the board investigators found credential compromise that gave access to PowerSchool’s database and said multiple breaches occurred in 2024. Schnapp said the incident could have exposed names, addresses and birth dates for millions of students and staff nationally and that his firm would pursue reimbursement for district time and expense, overpayment under contract, consequential damages and injunctive relief to require PowerSchool to meet federal and state cybersecurity standards.
Why it matters: The district uses PowerSchool for student information; Schnapp said the litigation seeks to hold PowerSchool accountable for alleged failures to implement basic protections such as multifactor authentication and to secure contractual indemnities. The board faces a near-term administrative choice whether to join a consolidated action, which could require limited staff involvement to complete a court discovery questionnaire if the board agrees to participate.
What was said: Schnapp said investigators (including a CrowdStrike review reported by PowerSchool) found unauthorized access via a compromised username and password and that the breach included activity in August, September and December 2024. He described contingency-fee representation (he said his firm reduced its fee to 30% for this consolidated matter) and said participation imposes minimal direct cost to the district; he estimated 2–3 hours of staff time for a discovery questionnaire and outlined possible remedies including reimbursement of administrative costs, overpayment claims under contract pricing, indemnity enforcement and court-ordered cybersecurity oversight.
Board response and next steps: Board members asked whether district data were definitely exposed, what records were affected, and whether testimony would require travel; the attorney said those details are still being clarified and that counsel would report back as more districts join consolidation. The board directed administration to place “PowerSchool breach litigation” on the next meeting’s action agenda for a formal decision after additional information and a likely staff-cost estimate.
Provenance: Presentation and Q&A with William Schnapp, Franks Law Group (attorney), April 2, 2025; board asked to add the item as an action item at the next meeting.
