PowerSchool Breach Exposes Brownsburg Community School Corporation Student Data

0

January 8th, 2025 –

At A Glance

What: Brownsburg Community School Corporation student information was compromised in a PowerSchool nationwide cybersecurity incident.
When: The cybersecurity incident took place on December 28th, 2024.
What do you need to do: At this time, there isn’t any action to be taken on your part. We expect to get additional communication from PowerSchool and will share any important updates. — per BCSC notification.

Brownsburg Community School notifies families of a data breach
In a notice sent to families on Jan 08th at 5:08pm. BCSC confirmed that Brownsburg student information was compromised as a part of a national system wide cybersecurity breach of their PowerSchool Student Information system.

PowerSchool, a cloud-based software solutions provider, reported the breach occurred on December 28th, 2024. At a national level the information exposed included student demographic information, such as name, social security numbers, date of birth, contact and other information.  

Brownsburg Community School stressed they do not collect nor store social security numbers for students or parents in PowerSchool. They went on “Working in cooperation with the FBI, PowerSchool has been given reasonable assurance that this information has been deleted by the unauthorized user.”.

The School Corporation mentioned “the Indiana Department of Education is filing a possible breach to the Indiana Office of Technology per state code”.

The School Corporation’s notice said “At this time, there isn’t any action to be taken on your part. We expect to get additional communication from PowerSchool and will share any important updates.”

(matejmo/Getty Images)

Additional Information regarding the attack
Power School sent a cybersecurity incident report to their customers Tuesday afternoon when they discovered an “unauthorized party was able to use a compromised credential to access one of our community-focused customer support portals”.  …“not all PowerSchool SIS customers were impacted and that they anticipate only a subset of customers will have to issue notifications.”

In response to the incident, PowerSchool retained a number of third-party cybersecurity experts who investigated and mitigated the incident.

“PowerSchool engaged the services of CyberSteward, a professional advisor with deep experience in negotiating with threat actors,”  “With their guidance, PowerSchool has received reasonable assurances from the threat actor that the data has been deleted and that no additional copies exist.”

PowerSchool says its operations remain unaffected, and services continue as usual despite the breach. 

PowerSchool reported they are committed to transparency and will share the final incident report with affected school districts when the investigation is complete.

>> Click here << to read PowerSchool cybersecurity incident email
About Power School
Power School provides cloud based (software as a service) solutions for schools and districts (K-12) for over 60 million students and over 18,000 customers around the world. Power School provides differentiated, mission-critical solutions that drive better education outcomes, empower educators, and help district operations run more efficiently.  Their platform helps districts with communication, enrollment, attendance, staff management, learning systems among other services.  Power School Holdings, Inc was purchased by Bain Capital on June 07, 2024 for 5.6 billion dollars.



BCSC Email Notification:

“Last night we were notified by PowerSchool, our student information system, that their servers were accessed by an unauthorized user. This has caused a national breach of information that involves thousands of school corporations. PowerSchool says the compromised data for affected customers could consist of required student demographic information including name, social security numbers, date of birth, and contact information. Brownsburg Schools does not collect and store social security numbers for students or parents in PowerSchool. We are unsure if that data field was part of the breach. Working in cooperation with the FBI, PowerSchool has been given reasonable assurance that this information has been deleted by the unauthorized user. The Indiana Department of Education is filing a possible breach to the Indiana Office of Technology per state code. At this time, there isn’t any action to be taken on your part. We expect to get additional communication from PowerSchool and will share any important updates.”


Please check have you received an invite to “LIKE” the Brownsburg Sentinel ?

Do you like our content?  Please help us Grow! Like us or Follow us!

Click on the LOGO. GOTO Facebook and “LIKE” our Page! Thank You!


Content by:
The Editor
Brownsburg Community School Corporation
Image by Kohji Asakawa from Pixabay

Article updated 2025 01 09 to Include Powerschool Incident Notification Email