More and more details have emerged about the December 28, 2024 cyberattack of the cloud-based educational software solutions company PowerSchool. While the company had disclosed the attack on January 7th, recently the threat actor who breached the company has claimed in the extortion demand that the number of affected students and employees is over 70 million.
As reported by BleepingComputer, the personal data of 62.4 million students and 9.5 million teachers was exposed during the attack when the threat actor used stolen credentials to access the PowerSchool customer support portal. After which, they used a maintenance access tool to download the data from districts’ PowerSIS databases.
