🥔Idaho State AGFirst filing
Filed Jan 10, 2025bd_bd02ebc50d2d966f
Grace Joint School District No. 148 reported a cybersecurity incident involving its student information system provider, PowerSchool. On December 22, 2024, a threat actor used compromised credentials to access the PowerSource customer support portal. The actor exfiltrated data from Student and Teacher tables, including PII (names, addresses, emails) and SSNs for a subset of educators. The district discovered the breach on January 8, 2025, deactivated the credentials, and is notifying affected individuals. The incident is considered contained with no ongoing threat.