HackingVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedPIIIDENTITY_BASICIDENTITY_GOVERNMENTHighContained

PowerSchool Holdings, Inc.

bd_5d6ca0c98c81d7ed · schema v1 · pii pii-v1

Full breach record for PowerSchool Holdings, Inc. →

PowerSchool Holdings, Inc. filed a supplemental notice with the New Hampshire Attorney General regarding a December 28, 2024 cybersecurity incident. Unauthorized exfiltration of personal information occurred via the PowerSource customer support portal. The incident affected 9,469 New Hampshire residents, involving student and educator data. PowerSchool engaged forensic experts and is offering two years of identity protection and credit monitoring services.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed9,469 affectedView incident

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/powerschool-holdings-20250428.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 28, 2025
Raw hash: f453a531e397be0012f08f848683b32d5a46fc7d70f02dd0250c9b66d65f3c0f

Reporting entity

Name: PowerSchool Holdings, Inc.
norm: powerschool holdings

Victim entity

Name: PowerSchool Holdings, Inc.
norm: powerschool holdings

Incident

Discovered: Dec 28, 2024
Materiality determined: —
Notification sent: —
Affected individuals: 9,469
Data types: PIIIDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Provided update to New Hampshire Attorney General Consumer Protection Bureau
Initial access: exploit_public_facing

Compliance

Time to disclose: 17 weeks(121 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.