Cyber Security News

PowerSchool Hacked – Attackers Accessed Personal Data of Students and Teachers

Walker County Schools has reported that unauthorized access to personal data belonging to students and educators was achieved through the company’s student information system vendor, PowerSchool.

Superintendent Damon Raines informed the community about the breach following an email notification from PowerSchool, detailing the incident that occurred on December 28, 2024.

Details of the Incident

According to PowerSchool’s communication, the company detected unauthorized access to its customer support portal, known as “PowerSource.”

While the investigation revealed that no malware was present and that the breach was limited to the PowerSource portal, the compromised data pertains to families and educators within the Walker County School system.

Here is the full email from PowerSchool shared by Walker County Schools

Raines assured that the situation was not indicative of ongoing threats, emphasizing that PowerSchool has implemented stringent security measures.

Investigate Real-World Malicious Links, Malware & Phishing Attacks With ANY.RUN – Try for Free

“PowerSchool has notified law enforcement and engaged cybersecurity experts to oversee the matter,” he stated. Furthermore, the institution confirmed that no additional PowerSchool products were affected by this breach.

PowerSchool has taken decisive steps to contain the situation, including isolating the access point and deactivating the compromised credentials.

They have also performed a full password reset for all accounts accessing the PowerSource portal. Superintendent Raines expressed confidence in PowerSchool’s proactive approach, stating, “They have taken all appropriate steps to prevent further unauthorized access or misuse.”

In their notification, PowerSchool reassured stakeholders that they do not expect the compromised data to be made public or used maliciously.

According to the Local3news reports, the company plans to provide credit monitoring services to affected adults and identity protection for impacted minors, by regulatory obligations.

Support for Affected Individuals

As part of its commitment to transparency and community support, PowerSchool will offer a communications package for school officials to inform families, educators, and other stakeholders about the incident.

This package will include outreach emails, FAQ documents, and talking points to facilitate discussions within the community.

Additionally, PowerSchool has scheduled webinars with senior leaders, including their Chief Information Security Officer, to address any concerns or questions regarding the incident.

These sessions are designed to equip school administrators with the information they need to reassure their communities about the breach and the measures being taken to mitigate potential impacts.

While the breach raises valid concerns about data security in educational environments, the swift response from both PowerSchool and Walker County Schools demonstrates a commitment to safeguarding personal information.

As the situation develops, ongoing communication and support will be crucial in restoring confidence among affected families and educators.

The authorities urge all individuals to remain vigilant and utilize the resources provided by PowerSchool to secure their personal information in the aftermath of this breach.

Find this News Interesting! Follow us on Google News, LinkedIn, and X to Get Instant Updates!

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago