Superintendent: PowerSchool breach under review; Johnson County not among districts hit hardest

Superintendent provided the board an update on a nationwide PowerSchool data breach and told trustees that Johnson County School District #1 does not appear to be among the districts with the largest exposures.

At the board meeting the superintendent said, "There were school districts over 90,000 social security numbers went out into the web. That is not Johnson County School District number 1," and described ongoing work with PowerSchool and the state to assess the district's records.

The superintendent said district staff have isolated some systems, have on-site support from a district specialist and will continue investigating which records, if any, were exposed. He said the district's data repository stretches back to about 2000 and that officials will contact individuals directly "if there are critical pieces of information about any individual." He also encouraged families to consult the district website for updates.

Board members asked how broadly the breach extended and whether the district had evidence of exposed sensitive identifiers. The superintendent said the incident consumed much of the district's last week and that a high-level follow-up meeting with PowerSchool and state representatives was scheduled.

The update did not announce formal findings about particular student or staff records; trustees were told the review is ongoing and that the district will provide direct notice to affected people if the review identifies critical exposures. The board moved on to other agenda items while district staff continue the investigation.