Citizen Portal
Sign In

Get Full Government Meeting Transcripts, Videos, & Alerts Forever!

Get email alerts on the Cybersecurity topic

No spam. Unsubscribe anytime.

Superintendent says PowerSchool experienced a cybersecurity incident; vendor to notify affected parties if PII impacted

Middlesex County School Board · January 13, 2025
AI-Generated Content: All content on this page was generated by AI to highlight key points from the meeting. For complete details and context, we recommend watching the full video. so we can fix them.

Summary

The superintendent updated the board on a cybersecurity incident reported by PowerSchool, the district’s student information system vendor, saying the vendor reported the incident was contained and that PowerSchool will mail notifications to affected students or staff if personally identifiable information was exposed.

The superintendent told the board that PowerSchool — the vendor hosting the division’s student information system — notified the district of a cybersecurity incident affecting PowerSchool’s systems.

According to the superintendent, PowerSchool reported that the data the bad actors accessed had been deleted and that the incident appears contained. The district said it is relying on PowerSchool’s investigation; if any personally identifiable information from the division was obtained, PowerSchool will be responsible for notifying affected individuals by mail.

The superintendent emphasized that the incident was not a breach of the district’s own systems or servers and that the local IT team, district leaders and the insurance provider (noted as VACOR in the transcript) are monitoring vendor communications. The board was told that further information will be shared as PowerSchool completes its investigation.