Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
District says PowerSchool breach affected many districts; parent notifications to follow
Summary
Superintendent reported a Dec. 22 PowerSchool breach that affected many districts via a compromised remote-support account. The district said PowerSchool is investigating, will notify families about what data was exposed, and will offer remediation supports; the district noted staff accounts use two-factor authentication and stored passwords are encrypted.
In the superintendent’s report the board was briefed on a widespread PowerSchool security incident that occurred Dec. 22 and impacted school districts nationwide through a compromised remote-support account. District officials said the attackers ran a script against many PowerSchool instances and that PowerSchool is taking responsibility and assisting districts to identify what data was accessed.
District staff said they do not yet have a complete inventory of which student or staff fields were copied and that PowerSchool will inform districts about the specifics; the district expects PowerSchool to mail notifications to affected families and to offer remediation supports. The superintendent reported that staff logins use Google accounts with two-factor authentication and that account passwords in the PowerSchool database are stored encrypted, which district officials said reduces exposure for password credentials.
Officials asked the public not to assume wrongdoing within the district’s operations; the district characterized the incident as a vendor-side breach and said it will share further details when PowerSchool provides its findings and affected-field lists.
