PowerSchool hacker now extorting individual school districts

PowerSchool disclosed a December 2024 breach of its PowerSource support portal involving compromised credentials and remote maintenance access that allowed threat actors to download district PowerSchool databases containing sensitive student and teacher PII; the attacker claims 62.4 million students and 9.5 million teachers were affected across 6,505 districts and is now individually extorting school districts even after PowerSchool paid a ransom and was told the data had been deleted.