🦬Montana State AG
Clustered 7 filings across 6 jurisdictions · filed Jan 27, 2025. View entity profile → Other incidents for this victim →
incident inc_696ae92aa5e64f46 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
IA ID ME MT NH VT
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Dec 19, 2024
When the intrusion reportedly occurred, per the linked filings
Dec 28, 2024
Reported by MAINE AG, VERMONT AG, IDAHO AG, NEW HAMPSHIRE AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
PowerSchool reported a data breach to the Montana Attorney General. The breach was reported on 2025-01-27. The breach occurred from 12/19/2024 to 12/28/2024. 41,520 Montana residents were affected.
Affected (this filing): 41,520
Powerschool, a education sector entity reported a data breach to the Iowa Attorney General. The breach was reported on 2025-01-27.
PowerSchool Group LLC, an education technology provider, reported a data breach to the Maine Attorney General. The breach, described as an external system breach (hacking), occurred between December 19, 2024, and December 28, 2024, and was discovered on December 28, 2024. The total number of affected individuals, including Maine residents, is yet to be determined. PowerSchool plans to notify affected consumers electronically on January 29, 2025, and is offering two years of complimentary identity protection and credit monitoring services through Experian.
PowerSchool disclosed a cybersecurity incident on December 28, 2024, involving unauthorized exfiltration of personal information from its Student Information System via the PowerSource support portal. Data types included names, contact info, DOB, SSNs, and limited medical alert info. PowerSchool engaged forensic experts and is offering two years of complimentary identity protection and credit monitoring to affected students and educators.
PowerSchool notified the Idaho Attorney General on January 27, 2025, of a cybersecurity incident occurring between December 19 and 28, 2024. Unauthorized actors exfiltrated personal information from the PowerSchool Student Information System (SIS) via the PowerSource support portal. Approximately 29,074 Idaho residents (students, former students, and teachers) were affected. Data included names, contact info, SSNs, dates of birth, and limited medical alerts. PowerSchool engaged forensic experts, reported to law enforcement, and offered two years of credit monitoring via Experian.
Affected (this filing): 29,074
PowerSchool, a technology service provider to school districts, disclosed a cybersecurity incident affecting approximately 9,384 New Hampshire residents. The unauthorized exfiltration of personal information (including names, SSNs, and dates of birth) occurred between December 19 and December 28, 2024, and was discovered on December 28, 2024. PowerSchool engaged forensic experts, notified law enforcement, and is offering two years of credit monitoring and identity protection services.
Affected (this filing): 9,384
Idaho AG received supplemental notice from PowerSchool regarding a cybersecurity incident occurring between Dec 19-28, 2024. Personal information of state residents (students/teachers) was exfiltrated, including names, DOB, SSN, and limited medical alerts. PowerSchool estimates 84% of Idaho customers are hosted; on-prem customer data is excluded from this notice.