Parents and educators are receiving notifications about the breach, but it’s still unclear exactly how many people have been affected or what information was leaked.

Cybercriminals spare no industry, targeting sectors like health care, insurance, automotive and education. Health care has been a frequent target, with attacks like the Ascension breach last year and the CVR incident in late 2024.

The California firm is the largest provider of cloud-based education software for K-12 schools in the country, supporting more than 50 million students. PowerSchool, a leading education technology firm,

In an FAQ obtained by TechCrunch, PowerSchool confirms it negotiated with the threat actors responsible for the breach.

Several central Ohio school districts have confirmed student, family and educator data may have been accessed in a data breach of a popular student information software. PowerSchool is a student information system that can be used by school districts to organize student data,

The breach is the latest in a series of high-profile cybersecurity incidents affecting K-12 schools, which are a top target of hackers and are uniquely vulnerable to cyberattacks.

Several central Ohio school districts, including Westerville, Upper Arlington and Grandview Heights, were affected by a PowerSchool data breach.

The personal information of 21,000 students Folsom Cordova Unified School District may have been stolen in a recent data breach.

State law requires school districts in Connecticut to notify parents and staff of a data breach within 48 hours. However, PowerSchool didn't notify districts in the state of the Dec. 28 attack until Tuesday and Wednesday of this week, school officials have said.

The educational software giant said it doesn’t anticipate any of the compromised information “being shared or made public,” as a review of the incident continues.