PowerSchool, a hacked education software maker, paid a ransom to delete stolen student data but now faces extortion claims from a threat actor alleging the data was not destroyed.
The company was hacked in December 2024, leading to unauthorized access to personally identifiable student and teacher data including Social Security numbers and health information.
Several schools, including Toronto’s district school board, have received extortion notes following the ransom payment, with hackers demanding money using the stolen data from the breach.
Security experts caution against paying ransoms, as hackers may not actually delete stolen data. PowerSchool disclosed that threat actors are attempting to extort some of its School Information System (SIS) customers using the compromised data.