Disciplinary and special ed records of Toronto students may have leaked in PowerSchool breach

PowerSchool experienced a breach in late December that allowed an attacker to access its PowerSource customer portal and potentially exfiltrate student and staff records; the company reports it paid a ransom and believes the stolen data was deleted. The Toronto District School Board warned that sensitive information — including special education accommodations, disciplinary and medical records, names, dates of birth, health card numbers, addresses, and contact details — for students (with some records reaching back to 1985) may have been exposed. PowerSchool serves millions of students worldwide, and authorities including Canada’s privacy commissioner are engaged.