PowerSchool Data Breach Announcement

Updated: January 9th, 2025

Subject: Update on PowerSchool Security Incident

Dear Parents and Guardians,

We want to provide an update on the PowerSchool security incident affecting school systems nationwide. The investigation, in collaboration with PowerSchool, is ongoing, and while we are working to determine the full impact, here’s what we know so far:

· Access Restored: PowerSchool access for users outside the state network (STAGEnet) was restored today, January 9, at 5 PM CST with heightened security protocols in place.

· Investigation Ongoing: We are working to confirm the exact scope of the incident, including the specific data fields affected and the total number of impacted student and staff records.

Out of an abundance of caution, we recommend changing your PowerSchool password to ensure your account’s security. We will share additional updates as more information becomes available.

Thank you for your patience and understanding.

If you have questions or concerns, or for more information on good password hygiene the PowerSchool-provided FAQs (https://www.edutech.nd.gov/services/powerschool).

Sincerely,

Four Winds High School

_________________________________________________________________________________________

Dear Parents and Guardians,

A nationwide breach involving PowerSchool’s support portal has impacted some student and teacher data.

Out of an abundance of caution, access to PowerSchool has been temporarily locked down as of 12:00 PM today for any user who is not connected to the state network, StageNet This means that access from outside the school network will be unavailable after this time. North Dakota Information Technology(NDIT) is working with PowerSchool and districts to evaluate the scope of the incident.

We also recommend changing your PowerSchool password as a precaution.

We want to provide you with the details of this incident and what steps are being taken to ensure the security of your information.

What Happened:

• On December 28, 2024, PowerSchool discovered unauthorized access to certain data in one of

their customer support portals (PowerSource).

• PowerSchool identified that only specific users whose information was marked in certain system configurations may have been affected.

What’s Being Done:

• PowerSchool has activated its cybersecurity response protocols and brought in third-party

cybersecurity experts.

• Access to the affected portal has been secured.

• PowerSchool has confirmed there is no evidence of malware or ongoing unauthorized activity.

Next Steps for Parents:

• Change your PowerSchool password as a precaution. Create a strong password that you do not

use for other accounts.

• Monitor communications from your school for updates as additional information becomes

available.

• The next update on this incident will be sent out on January 17 by noon.

Key Points to Know:

• PowerSchool continues to investigate and will provide updates if any new findings emerge.

• NDIT is collaborating with PowerSchool and districts to assess the scope of the incident and

provide assistance.

We understand that cybersecurity concerns can be unsettling, but rest assured, every effort is being made to safeguard your information. If you have questions or concerns, please contact your district

directly or consult the PowerSchool-provided FAQs (https://help.powerschool.com/t5/Support/ctp/

Contact-Support)

Thank you for your understanding and partnership as we address this situation.