HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
PowerSchool
bd_9a98070b775c7a1c · schema v1 · pii pii-v1
Full breach record for PowerSchool →PowerSchool, a technology service provider to school districts, disclosed a cybersecurity incident affecting approximately 9,384 New Hampshire residents. The unauthorized exfiltration of personal information (including names, SSNs, and dates of birth) occurred between December 19 and December 28, 2024, and was discovered on December 28, 2024. PowerSchool engaged forensic experts, notified law enforcement, and is offering two years of credit monitoring and identity protection services.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_14ac2c628ad65a74Montana State AGfiled 2025-01-27Candidate
- bd_2390e896c65d5b5fIowa State AGfiled 2025-01-27Verified
- bd_438ff508f653f09dMaine State AGfiled 2025-01-27Verified
- bd_44f09dcd18ee4d0bVermont State AGfiled 2025-01-27Verified
Show 2 more filings ↓Show fewer ↑
- bd_56171406702909c2Idaho State AGfiled 2025-01-27Verified
- bd_ec1bace9d0e95897Idaho State AGfiled 2025-01-27Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/power-school-20250127.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 27, 2025
- Raw hash
- 8e188f3de934b1b03aa1e88fb9f2bacb899e614d5f5f35a9ab9cf299175bfefa
Reporting entity
- Name
- PowerSchoolnorm: powerschool
Victim entity
- Name
- PowerSchoolnorm: powerschool
Incident
- Discovered
- Dec 28, 2024
- Materiality determined
- —
- Notification sent
- Jan 27, 2025
- Affected individuals
- 9,384
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.