OneSchool Global North America
bd_f601050fa97dc34c · schema v1 · pii pii-v1
Full breach record for OneSchool Global North America →One School Global N.A., Inc. (OSGNA) notified the Maryland Attorney General of a security incident involving its Student Information System (SIS) vendor, PowerSchool. The incident, occurring around December 28, 2024, involved unauthorized exfiltration of personal information from PowerSchool's PowerSource portal by an unknown third party. OSGNA confirmed one Maryland resident was affected, with data including names, addresses, and medical history (doctor's name, medications, medical history). OSGNA activated its incident response team, notified law enforcement, and is coordinating with PowerSchool, which is offering credit monitoring and identity protection services.
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376278.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 31, 2025
- Raw hash
- 9d507165285bf00c70576272391ea3bc429d22bc124866fff10a9802134147ba
Reporting entity
- Name
- OneSchool Global North Americanorm: oneschool global north america
- Domain
- na.oneschoolglobal.com
Victim entity
- Name
- OneSchool Global North Americanorm: oneschool global north america
- Domain
- na.oneschoolglobal.com
Incident
- Discovered
- Jan 9, 2025
- Materiality determined
- —
- Notification sent
- Jan 10, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICHEALTH_BASICPHI
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 ChannelT1530 Data from Cloud Storage Object
- Threat actor
- External
- Regulator citations
- Filed notice with Maryland Office of the Attorney General pursuant to Md. Code Ann., Com. Law § 14 -3504(h)(1)
- Initial access
- external_remote_services
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- MD AG ≤30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.