PowerSchool hack: School boards face new ransom demands months after leak
Some Canadian school boards say they've been the target of ransom attempts in relation to the massive data breach of PowerSchool, which saw millions of current and former students across the country impacted.
In letters to families on Wednesday, the Toronto District School Board, Peel District School Board and Calgary Board of Education said they had been contacted by a 'threat actor demanding a ransom.'
Each school board says PowerSchool is not reporting that new information has been accessed, and it's believed the data being used for ransom is what was obtained in December 2024.
PowerSchool, the U.S.-based company that provides the student information system that was breached, said on Wednesday that it was aware that school boards and districts across North America had been contacted.
'We do not believe this is a new incident, as samples of data match the data previously stolen in December,' the company wrote. 'We sincerely regret these developments – it pains us that our customers are being threatened and re-victimized by bad actors.'
Story continues below advertisement
It said it had reported the matter to law enforcement in both Canada and the U.S. and was working with customers to support them.
2:08
Calgary law firm files lawsuit over massive PowerSchool data breach
The company said following the December breach that it had paid a ransom, as it believed it would be 'in the best interest of our customers.'
Get daily National news
Get the day's top news, political, economic, and current affairs headlines, delivered to your inbox once a day. Sign up for daily National newsletter Sign Up
By providing your email address, you have read and agree to Global News' Terms and Conditions and Privacy Policy
The Peel, Toronto and Calgary school boards said in their letters that the company had previously told them the data that had been accessed had been deleted with no copies posted online, but that was not the case.
'As with any such incident, there was a risk that the threat actors would not honour their commitment to delete the stolen data, despite assurances from PowerSchool,' the Calgary Board of Education wrote in its letter, which added it had not paid or contributed to any ransom payment.
Story continues below advertisement
The original breach happened in December, with boards across multiple provinces contacted.
Global News contacted every school board across the country earlier this year to determine how many were impacted. Of those that responded, at least 87 were affected.
Data from those that provided numbers showed that more than 2.77 million current and former students were confirmed to have been affected. In addition, 35,951 staff members, including teachers, were confirmed impacted, with one Nova Scotia school board advising that 3,500 parents' data was also accessed.
Data including people's names, contact information, date of birth, limited medical alert information and, in some cases, social insurance numbers was accessed, according to both PowerSchool and several school boards. No SINs were accessed, however, at the Toronto, Peel and Calgary school boards that alerted parents this week.
According to various officials and public statements from school boards, data breaches have been seen in Alberta, Saskatchewan, Manitoba, Ontario, Northwest Territories, Nova Scotia, Prince Edward Island, and Newfoundland and Labrador.
Quebec, New Brunswick, Nunavut, British Columbia and Yukon officials said their boards were not impacted.
Canada and Ontario's privacy commissioners said earlier this year that they were investigating the breach.
In a statement to Global News, a spokesperson for Canada's privacy commissioner said the company had made it aware of the incident and remains 'actively engaged' to ensure PowerSchool is taking steps to respond to the breach.
Story continues below advertisement
The commissioner's office said it could not provide further details as its investigation is ongoing.
A class-action lawsuit was also launched earlier this year by Calgary law firm Cuming and Gillespie, though lawyer Craig Gillespie told Global News there was 'no urgent call to action' for people to get involved at this time, as it still needs to be certified. Notices will go out for people to join once that occurs.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Toronto Star
2 hours ago
- Toronto Star
‘Historic moment': First LNG Canada shipment departs B.C. for Asia
A tanker being loaded with the first cargo of Canadian liquefied natural gas is shown at the port of Kitimat, B.C. on Saturday June 28, 2025 in this photo provided by LNG Canada. THE CANADIAN PRESS/Handout — LNG Canada (Mandatory Credit) flag wire: true flag sponsored: false article_type: : sWebsitePrimaryPublication : publications/toronto_star bHasMigratedAvatar : false :
Calgary Herald
3 hours ago
- Calgary Herald
Ivison: After the inferno, Jasper is on the rebound
Rachel Bailey finally saw a future for herself running a fine dining restaurant in the Rocky Mountain paradise of Jasper, Alta. Article content The native of Manchester, England, was drawn to the snowy peaks and turquoise lakes in 2013, and spent much of the next decade struggling to realize her dream of Canadian citizenship. Her plan was to use her British law degree to become accredited in Canada, but she found herself working part-time in a Jasper bistro and at a local law firm. Article content Article content Article content By the end of 2023, she'd become a Canadian citizen, and the owners of the bistro where she worked had asked her to use her sommelier skills to open a new concept that paired wines with fresh local game and produce. Bailey was invited to become part-owner, and the idea for Peacock Cork and Fork was born. Article content Article content Bailey and her partners purchased an upper-level space on Patricia Street in Jasper's downtown, and on June 12, 2024, the restaurant opened to great fanfare. Article content Just 40 nights after opening — on July 22 last year — the Peacock was so badly damaged by the wildfire that nearly swept away the entire town that it had to be condemned. Bailey lost not only her livelihood but also the house she rented farther up Patricia Street. Article content Article content Article content My wife and I met Bailey — Rachel — when she served us in one of the bustling restaurants that survived the fire, Harvest, just downstairs from where the Peacock was located. Article content Eleven months after the fire that destroyed one-third of Jasper's 1,113 buildings and burned an area nearly the size of the island of Montreal in the surrounding national park, it feels like a town that is just getting by. Article content Gazing toward the town from the Maligne Canyon look-out, the landscape looks like Mordor, scorched earth, pockmarked by thousands of blackened tree stumps. No one knows how much wildlife was lost, though it was recorded that elk and grizzly bears wandered the main streets of the town in the days after the fire, looking for an escape route.
Calgary Herald
3 hours ago
- Calgary Herald
Tasha Kheiriddin: Carney will have no choice but to kill supply management
Article content For a while there, things were going so well. Prime Minister Mark Carney — aka 'the Trump whisperer' — had morphed from critic to texting buddy of the U.S. President. Over the past three months, Carney had been chatting with Donald Trump, building backchannel goodwill. After the successful G7 summit in Kananaskis, Alta., hopes were high that Ottawa would strike a deal with Washington in 30 days, and that the rhetoric of making us the '51st state' had finally been retired. Article content Article content Until last Friday, when everything fell apart. Article content Article content Article content That's when President Trump abruptly cut off trade negotiations with Canada over our three per cent digital services tax, set to take effect June 30. Aimed at U.S. tech giants Amazon, Meta, Google and AirBNB, the tax was retroactive to 2022 and would have cost them an estimated $2 billion in back payments. The tech bros howled, the president barked, and Carney blinked. Sunday night, he backed down and cancelled the tax: Monday morning, U.S. Commerce Secretary Howard Lutnick thanked him for the climbdown, as did the Canadian Chamber of Commerce. Negotiations were back on. Article content But if you thought that was the last bump in the road, you couldn't be more wrong. In an interview broadcast Sunday morning on Fox, Trump mentioned a veritable mountain: supply management. That's the system that protects Canadian dairy, poultry and egg industries from foreign competition through quotas and tariffs, including Trump's favourite bugaboo, a 200-plus per cent markup on U.S. dairy products. Article content Article content It's true that the tariff only kicks in after the U.S. exports 50,000 zero-tariff metric tons of milk and 12,500 metric tons of cheese per year — levels it is nowhere near approaching. But supply management was already a sticking point with Trump in the CUSMA negotiations under Prime Minister Justin Trudeau, and Republican lawmakers and U.S. dairy producers continue to demand its elimination. Article content Article content In our country, unfortunately, it has become a hill on which political careers go to die. Case in point: People's Party Leader Maxime Bernier, whose ambition to lead the Conservative party in 2017 was thwarted by the Quebec dairy lobby after he promised to ditch the policy. And the sacred cow lives on: in June, the House of Commons and Senate passed a Bloc Québécois bill with all-party support to prevent bargaining supply management away. Article content Carney knows that he owes his recent election victory in large part to Quebec voters — and with a minority, needs the support of opposition parties like the Bloc to stay in power. But if Canada wants a serious trade deal with a Trump White House, supply management will have to go. Not just for the sake of negotiations, but because it's a cartel policy that has had its day.
