logo

PowerSchool paid thieves to delete stolen student, teacher data. Looks like crooks lied

ID: 4b71903c-9604-5494-9ef6-845d5936e03c

STIX ID: report--4b71903c-9604-5494-9ef6-845d5936e03c

Feed Name: The Register (Security)

Threat Score
75/100

Date Published: 2025-05-08

Date Updated: 2026-04-26

Author: Iain Thomson

...
...

PowerSchool experienced a December 2024 breach in which a stolen credential allowed exfiltration of sensitive information for roughly 60 million K–12 students and staff; although PowerSchool paid a ransom claiming the data would be deleted, attackers or affiliates are now individually extorting school districts with the stolen data, indicating the deletion may not have been complete and creating ongoing risk to affected districts.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.