logo

Despite ransom payment, PowerSchool hacker now extorting individual school districts

ID: c38f2157-869a-52a7-b6d9-5612ac03a442

STIX ID: report--c38f2157-869a-52a7-b6d9-5612ac03a442

Feed Name: The Record from Recorded Future News

Threat Score
85/100

Date Published: 2025-05-07

Date Updated: 2026-05-01

...
...

PowerSchool, breached in December 2024 exposing sensitive data for over 60 million K–12 students and 9 million teachers, is reporting that the same threat actor is now attempting to extort multiple school districts using the previously stolen data; the company had paid a ransom and believed the incident contained, but evidence indicates the attacker retained copies and continued to leverage the data against customers.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.