PowerSchool SIS, which provides K-12 software to more than 18,000 schools to support some 60 million students in the United States, confirmed the breach in early January.
Hackers used compromised credentials to breach its customer support portal, allowing further access to the company’s school information system.
PowerSchool has declined to answer open questions about the incident, which could potentially be one of the biggest breaches of the year.
PowerSchool customers affected by the breach have many unanswered questions, with many impacted schools collaborating to investigate the hack.
The scale of the hack is unclear; PowerSchool has not revealed the number of schools or students affected.
Sensitive personal information on students and teachers, including some students’ Social Security numbers, grades, demographics, and medical information, was stolen.
PowerSchool worked with a cyber-extortion incident response company to negotiate with the threat actors responsible for the breach, indicating that it might have paid the ransom to them.
The company has refused to say how much it paid or how much the hackers demanded.
Uncertainty remains over whether the hackers are still in possession of the stolen data, despite early reports suggesting that PowerSchool received video proof of deletion.
The identity of the attackers remains unknown, with PowerSchool remaining tight-lipped.