School districts hit with extortion attempts after PowerSchool breach
The company, PowerSchool, missed a basic cybersecurity step, according to a cybersecurity audit obtained by NBC News, and was hacked last year, leading to one of the largest breaches to date of American children's personal data. PowerSchool reportedly paid an undisclosed sum to the hackers in exchange for a video of them purporting to delete the files they had stolen, which included some students' Social Security numbers and other information, like health and disciplinary records.
But 'a threat actor' is using that stolen data to try to extort schools and school districts in both the U.S. and Canada, according to statements from PowerSchool and various school districts issued Wednesday.
'PowerSchool is aware that a threat actor has reached out to multiple school district customers in an attempt to extort them using data from the previously reported December 2024 incident,' PowerSchool wrote in a statement Wednesday. 'We do not believe this is a new incident, as samples of data match the data previously stolen in December.'
Public schools across North Carolina received extortion emails Wednesday morning, North Carolina Department of Public Instruction Superintendent Mo Green said in a public bulletin. The threat actor appears to have students' and staffers' names, contact information, birthdays, medical information, parental information, and in some cases Social Security numbers, he said.
Several Canadian school authorities have announced they are also among the victims, including the Peel District School Board in Ontario and the Toronto District School Board. The Calgary Board of Education also issued a warning to parents this week based on communication it had received from PowerSchool.
It was not immediately clear who was behind the current extortion attempt. PowerSchool said it believes that the threat actor is using data stolen from the original incident last year, indicating that the original hackers either are behind the current attempts or kept the data and made it accessible to other people.
'We have reported this matter to law enforcement both in the United States and in Canada and are working closely with our customers to support them. We sincerely regret these developments– it pains us that our customers are being threatened and re-victimized by bad actors,' PowerSchool's statement said.
'As is always the case with these situations, there was a risk that the bad actors would not delete the data they stole, despite assurances and evidence that were provided to us,' it said.
It is not clear if other American school districts had been victims of the renewed extortion attempt. PowerSchool declined to name victims, saying only that it was aware of 'multiple school district customers.' A majority of U.S. states have at least one school district that was affected by the original breach.
PowerSchool is one of the largest companies in the educational technology industry, which became particularly widespread during the Covid pandemic and uses software to streamline school processes. One of its primary programs helps school districts track students, and the company servers stored information like their names, family members, addresses and birthdays.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Boston Globe
3 hours ago
- Boston Globe
Don't look away from what's happening in Iran
As an Iranian-American who has lived and worked as a journalist in Iran — and who spent 100 days imprisoned there — I feel both anguish and dread watching history repeat itself. The leaders of the United States, Israel, and the Islamic Republic are jockeying over claims of victory, while human rights abuses and the everyday suffering of ordinary Iranians have started to fade, once again, from the headlines. Advertisement During the 12 days of war, more than 700 people were accused of being 'Israeli operatives' and were arrested, according to the state-affiliated Fars News Agency. Human rights groups Get The Gavel A weekly SCOTUS explainer newsletter by columnist Kimberly Atkins Stohr. Enter Email Sign Up Meanwhile, Iran's parliament has Advertisement It's no surprise that a regime blindsided by a foreign enemy's highly coordinated attacks would now move swiftly to root out what it sees as security threats. But the regime is not just fighting foreign adversaries. It is using the war as a pretext to crack down on domestic dissent. Having experienced firsthand the lack of due process and transparency within the Islamic Republic's judicial system, I have no doubt that many innocent people will be punished for crimes they did not commit. In 2009, after six years of living and working in Iran as a journalist, I was arrested and accused of spying for the United States. My interrogators claimed that the CIA had paid me to use a book I was writing about Iran as a cover for espionage. 'It's not possible you could be conducting so many interviews,' one insisted, 'only for a book.' Like many Iranian political prisoners, I was held in solitary confinement and subjected to grueling interrogations, unable to inform anyone of my whereabouts. The authorities threatened my loved ones, fabricated evidence, and warned that espionage could result in many years in prison, and even the death penalty. For decades the regime has accused journalists, civil society leaders, women's rights activists, lawyers, academics, environmentalists, and humanitarian workers of committing crimes against the state — sometimes under a charge of espionage. During my time in Tehran's notorious Advertisement My own sentence was eight years, but I was lucky. After an Countless others — especially those without the support of a foreign government or the attention of the international media — have not been so fortunate. The regime expends enormous resources interrogating citizens, monitoring internet activity and phone calls, pressuring people to inform on one another, and tailing them in the streets, in cars, even on flights abroad. 'If the system worked well, they would have found the real spies and prevented Israel from doing so much damage,' an Iranian friend told me. 'But instead, the regime took people like you and claimed you were spies.' Today, many of those being swept up in the regime's dragnet appear to be suffering the same fate. Detainees are being fast-tracked through unfair trials in kangaroo courts without legal representation or due process, according to the Center for Human Rights in Iran. The Iranian regime is responding with repression because 'it knows it won't collapse due to foreign intervention alone,' says Rebin Rahmani, a board member of the Paris-based Advertisement This crackdown, in other words, was predictable. Afsoon Najafi, whose youngest sister, Hadis, was shot and killed by security forces during nationwide protests in 2022, told me, 'A large percentage of Iranians will again be killed by the Islamic Republic because the regime's agents are full of resentment toward Iranians. And the regime's own agents also know that we know they're scared.' Regardless of whether US and Iranian officials resume negotiations over Iran's nuclear program, the Trump administration has an opportunity to show that human rights matter, too. That means, among other things, supporting Iranians' access to information — for example, by restoring full funding to Voice of America Persian, a crucial source of uncensored news for millions in Iran. American citizens can also play a role. By calling their members of Congress and expressing support for measures like the Steps like those from the American people, even if their message isn't taken up by Congress and the current administration, would still send a clear signal to Iran: Human rights abuses will not be ignored. When I asked an artist in Tehran what she hoped the world would understand about the Iranian people now that a fragile cease-fire is in place, she said on condition of anonymity, 'I don't know what the people of the world can do, but I want them not to be indifferent to the pain we're enduring.' 'At the very least,' she added, 'let us remain in the news. Let them keep an eye on us.' Advertisement If the world fails to keep an eye on the Iranian people, we risk silently sanctioning yet another chapter of repression in the Islamic Republic of Iran.
3 hours ago
US completes deportation of 8 men to South Sudan after weeks of legal wrangling
WASHINGTON -- Eight men deported from the United States in May and held under guard for weeks at an American military base in the African nation of Djibouti while their legal challenges played out in court have now reached the Trump administration's intended destination, war-torn South Sudan, a country the State Department advises against travel to due to 'crime, kidnapping, and armed conflict.' The immigrants from Cuba, Laos, Mexico, Myanmar, Vietnam and South Sudan arrived in South Sudan on Friday after a federal judge cleared the way for the Trump administration to relocate them in a case that had gone to the Supreme Court, which had permitted their removal from the U.S. Administration officials said the men had been convicted of violent crimes in the U.S. 'This was a win for the rule of law, safety and security of the American people,' said Homeland Security spokeswoman Tricia McLaughlin in a statement Saturday announcing the men's arrival in South Sudan, a chaotic country in danger once more of collapsing into civil war. The Supreme Court on Thursday cleared the way for the transfer of the men who had been put on a flight in May bound for South Sudan. That meant that the South Sudan transfer could be completed after the flight was detoured to a base in Djibouti, where they men were held in a converted shipping container. The flight was detoured after a federal judge found the administration had violated his order by failing to allow the men a chance to challenge the removal. The court's conservative majority had ruled in June that immigration officials could quickly deport people to third countries. The majority halted an order that had allowed immigrants to challenge any removals to countries outside their homeland where they could be in danger. A flurry of court hearings on Independence Day resulted a temporary hold on the deportations while a judge evaluated a last-ditch appeal by the men's before the judge decided he was powerless to halt their removals and that the person best positioned to rule on the request was a Boston judge whose rulings led to the initial halt of the administration's effort to begin deportations to South Sudan. By Friday evening, that judge had issued a brief ruling concluding the Supreme Court had tied his hands. The men had final orders of removal, Immigration and Customs Enforcement officials have said. Authorities have reached agreements with other countries to house immigrants if authorities cannot quickly send them back to their homelands.
UPI
12 hours ago
- UPI
French Bishop to lead Vatican's minors-protection commission
Pope Leo XIV holds a drawing during an audience with children and young people during the 'Estate Ragazzi in Vaticano' summer camp in Vatican City on Thursday. Photo by Vatican Media/EPA July 5 (UPI) -- French Archbishop Thibault Verny is the Vatican's new president of its Pontifical Commission for the Protection of Minors after opposing child abuse within the Episcopal Conference. Pope Leo XIV appointed Verny to succeed American Capuchin Cardinal Sean Patrick O'Malley, with whom Verny worked to promote a "culture of protection for vulnerable people," Vatican News reported on Saturday. Verny is the Archbishop of Chambery and the Bishop of Maurienne and Tarentaise in France. As president of the commission to protect minors, Verny said he will continue working to protect minors against sexual abuse and raise awareness within the church. "In France, my mission ... allowed me to listen to the victims and accompany them on their journey," Verny said. "It was a decisive experience." He also worked with law enforcement and other civil authorities to develop protocols for thwarting abuse within the church. "It is a matter of raising awareness among the various sepiscopates, religious orders and congregations in different countries about listening to and accompanying victims in a specific way," Verny said. "We must continue to implement a mindset [and] a culture within the churches to spread the protection of minors and ensure that it becomes natural, both in the church and in family and also in society." His appointment comes as the Catholic Church works to address past wrongs and prevent future occurrences. Pope Francis in September visited Timor-Leste, during which he called for protecting youth amid a clergy abuse scandal in the island nation. He made the visit following the Vatican in 2022 disciplining Bishop Ximenes Belo, who had been accused of sexually abusing young boys during the 1980s and 1990s. The accusation was one of many that have plagued the Catholic Church for many years. In France, the Independent Commission on Sexual Abuse published a 2,500-page report in 2021 after a three-year investigation.
