norm: grace joint school district no 148no LEI · no CIKMax severity: Medium

Canonical registry

Grace Joint School District No. 148

ent_223a0137d4a1acf884e79984

Compliance scorecard →View in feed →

Disclosures

1

State AG · 1 jurisdiction

Multi-filing incidents

—

no multi-filing incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Grace Joint School District No. 148
Normalized: grace joint school district no 148— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

Idaho State AGas victim2025-01-10
Grace Joint School District No. 148 reported a cybersecurity incident involving its student information system provider, PowerSchool. On December 22, 2024, a threat actor used compromised credentials to access the PowerSource customer support portal. The actor exfiltrated data from Student and Teacher tables, including PII (names, addresses, emails) and SSNs for a subset of educators. The district discovered the breach on January 8, 2025, deactivated the credentials, and is notifying affected individuals. The incident is considered contained with no ongoing threat.

Supply-chain cascadesreviewed and confirmed

Grace Joint School District No. 148’s filing is one of at least 65 in the PowerSchool supply-chain incident (2025).