HackingStolen CredentialsData ExfiltratedRansom DemandedSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedIDENTITY_BASICHEALTH_BASICHighActive
West Ada School District
bd_aeda8b8665aac107 · schema v1 · pii pii-v1
Full breach record for West Ada School District →West Ada School District notified the Idaho Attorney General of a breach affecting its PowerSchool Student Information System. The incident occurred Dec 19-23, 2024, involving unauthorized access via compromised credentials. Over 149,000 student and staff records were potentially affected, including PII and health data. PowerSchool Group LLC, the third-party provider, engaged CrowdStrike and CyberSteward, paid a ransom, and disabled access. The District issued notifications and is evaluating credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed149,000 affectedView incident
Source provenance
- Source URL
- https://www.ag.idaho.gov/content/uploads/2025/01/1-11-2025-West-Ada-School-District.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 11, 2025
- Raw hash
- 175610cc5123dde662455bd145cf222eee9b99df8243014e4f66dfcf98eb9c71
Reporting entity
- Name
- West Ada School Districtnorm: west ada school district
Victim entity
- Name
- West Ada School Districtnorm: west ada school district
Incident
- Discovered
- Dec 28, 2024
- Materiality determined
- —
- Notification sent
- Jan 9, 2025
- Affected individuals
- 149,000
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Idaho Attorney General's OfficeNotified State Board of Education and State Superintendent of Public Instruction
- Third party
- via PowerSchool Group LLC
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.