PowerSchool Data Breach Information

PowerSchool Cybersecurity Incident

January 10, 2025

St. Clair County RESA was recently informed by PowerSchool (the company that provides our school district with student information management software) of a cybersecurity incident that impacted data worldwide. This incident is limited to PowerSchool, and there is no evidence of further impact on district operations. It is important to note that only TEC and Creekside Learning Center data may have been compromised. (Our other buildings are currently using another SIS and were not affected.) We are still working to confirm with PowerSchool exactly what data may have been accessed.

PowerSchool advised us that on December 28, 2024, they discovered unauthorized access to certain customer data, including some information related to our school district. PowerSchool has informed us that they have taken all appropriate steps to prevent further unauthorized access or misuse of the data involved. PowerSchool is investigating and has committed to providing details regarding the impacted data. 

PowerSchool informed us that the data taken primarily includes parent and student contact information, as well as data elements such as name and address information. Across their customer base, they have determined that for a portion of individuals, some personally identifiable information (PII), such as social security numbers (SSN) and medical information, was impacted. They are urgently working to complete their investigation and determine whether PII belonging to our students was included.

PowerSchool has assured us that they will provide the necessary support, including credit monitoring for affected adults and identity protection services for affected minors. 

While PowerSchool is responsible for this incident and its impact, our team acted swiftly once we were notified and is continuing to investigate. We understand the importance of your trust and are diligently committed to protecting our student and staff data.