PowerSchool cyber incident information - Update

This page has been created to provide the most current information regarding the cyber incident affecting PowerSchool and its customers. Although PowerSchool has informed us that our data was accessed, the incident targeted their broader customer base rather than our District specifically. PowerSchool has assumed full responsibility for addressing the matter and is conducting a comprehensive investigation to determine which of our users were affected.

Update: PowerSchool has started the notification phase of their process. Please keep an eye out for an email or letter from PowerSchool that has information about how to setup services. If you have not recieved a notification then your information was not accessed.

https://www.powerschool.com/security/sis-incident/

https://www.powerschool.com/security/sis-incident/notice-of-united-states-data-breach/

Updated Statement:

Dear families and educators of the CCPSD community—

We are reaching out to share more information and next steps that we recently received directly from PowerSchool.

PowerSchool has engaged Experian, a trusted credit reporting agency, to offer the following services to only those whose PII was involved in the incident. If your PII wasn’t involved, then you will not be offered these services. Please see the statements from PowerSchool below for more information.

Identity Protection and Credit Monitoring Services: Two years of complimentary identity protection services for all students and educators whose information from our PowerSchool SIS was accessed. This offer will also include two years of complimentary credit monitoring services for all adult students and educators whose information was involved

Notification to Individuals Involved: Starting in the next few weeks, in collaboration with Experian, PowerSchool will provide notice to students (or their parents / guardians if the student is under 18) and educators whose information was involved, as well as a phone number to answer any questions you may have about the incident. The notice will include the identity protection and credit monitoring services offered (as applicable).

As soon as PowerSchool learned of the incident, they engaged cybersecurity response protocols and mobilized senior leadership and third-party cybersecurity experts to conduct a forensic investigation of the scope of the incident and to monitor for signs of information misuse. PowerSchool is using information gathered from this forensic investigation to determine who will be offered the identity and credit monitoring services. If you are not contacted by PowerSchool in the following weeks, then it was determined that you or your students PII was not accessed. PowerSchool is not aware of any identity theft attributable to this incident.

In the meantime, I encourage you to visit https://www.powerschool.com/security/sis-incident/ for up-to- date information on the cybersecurity incident. We care deeply about the welfare of families and will continue to do everything we can to support you.

Sincerely,

Alex Leonard

Please see the links below for up-to-date information directly from PowerSchool:

PowerSchool SIS Incident Response and FAQs

CCPSD Notification of Incident

visit page