Cottonwood School District #242 reported a data security incident to the Idaho Attorney General on March 11, 2025. The breach originated from third-party vendor PowerSchool, which provides Student Information Systems. The incident exposed Idaho residents' names and Social Security numbers. Cottonwood engaged legal counsel and a forensic firm, and PowerSchool provided notice and credit monitoring to affected individuals.