Overview
- Hackers are targeting multiple school districts in the U.S. and Canada, demanding ransoms to avoid public release of sensitive data stolen in the December 2024 PowerSchool breach.
- PowerSchool confirmed it paid a ransom last year, hoping to secure deletion of the stolen data; however, extortion attempts reveal it was not destroyed.
- The Toronto District School Board and others have received ransom demands, with stolen data potentially including personal, medical, and educational records.
- Law enforcement in both the U.S. and Canada has been notified, and PowerSchool is working with affected districts to address the situation.
- The incident highlights the risks of ransom payments and the urgent need for stronger cybersecurity measures in the education technology sector.