The recent PowerSchool data breach has sent shockwaves through the education sector, exposing sensitive information of millions of students and teachers across North America. This massive cyberattack, discovered in late December 2024, has affected thousands of school districts and highlighted the urgent need for improved cybersecurity measures in educational institutions.
Scope of the Breach
PowerSchool, a leading provider of cloud-based software for K-12 education, serves thousands of educational institutions worldwide, managing data for tens of millions of students. The breach occurred when hackers gained unauthorized access to PowerSchool’s customer support portal, PowerSource, using stolen credentials. From there, they exploited a customer support maintenance tool to download student and teacher data from districts’ PowerSchool Student Information System (SIS) databases. While PowerSchool has not officially disclosed the full extent of the breach, it is believed that data from tens of millions of students and teachers may have been compromised. This suggests the attack’s scope may be significantly larger than initially reported.
Data Compromised
The stolen information varies by school district but potentially includes:
- Full names
- Physical addresses
- Contact information
- Social Security numbers (SSNs)
- Medical data
- Student grades
- Enrollment history
- Teacher licensing and salary information
In some cases, the breach affected not only current students and staff but also historical data, potentially impacting individuals who are no longer associated with the affected schools.
Schools Affected
The breach has impacted thousands of school districts across the United States and Canada. In Canada alone, dozens of school boards across multiple provinces and territories reported being affected. Some of the largest school boards in Ontario were impacted, affecting millions of students. In the United States, affected districts span multiple states, including large districts in California, Connecticut, Illinois, and Alabama.
Protecting Against Future Attacks
To better protect themselves from similar breaches, schools and organizations should consider the following measures:
- Implement strong access controls: Use multi-factor authentication and regularly update passwords for all systems. Please read our guide on implementing multi-factor authentication.
- Conduct regular security audits: Regularly assess and update security protocols to identify and address vulnerabilities. ATYXIT offers auditing and compliance services that can do just that.
- Encrypt sensitive data: Ensure that all personal and sensitive information is encrypted both in transit and at rest.
- Provide cybersecurity training: Educate staff and students about best practices for data security and how to identify potential threats. Read about the role employee cybersecurity training plays in most attacks.
- Limit data collection and retention: Only collect and store essential information, and implement strict data retention policies.
- Vet third-party vendors: Thoroughly assess the security measures of any software or service providers before granting access to sensitive data.
- Develop and test incident response plans: Create comprehensive plans for responding to potential breaches and conduct regular drills to ensure readiness.
- Monitor for suspicious activity: Implement robust monitoring systems to detect and respond to unusual access patterns or data exports.
- Keep software updated: Regularly apply security patches and updates to all systems and applications.
- Consider cyber insurance: Invest in comprehensive cyber insurance to help mitigate the financial impact of potential breaches.
By implementing these measures, educational institutions and organizations can significantly enhance their cybersecurity posture and better protect the sensitive data of students, staff, and faculty. As cyber threats continue to evolve, it’s crucial for all entities handling personal information to remain vigilant and proactive in their approach to data security.
ATYXIT is an Illinois based security-first Business IT Solutions Provider and Chicago Cloud Provider. We excel in supporting and evolving company networks. Our technical support, technology consulting, project management, cyber security and IT strategy services make us the ideal IT resource for local small and medium sized businesses.
Reach out today if you need any assistance with your business technology!