Archive — US — techcrunch
Hacker accessed PowerSchool’s network months before massive December breach
A hacker compromised PowerSchool's network months before a significant data breach in December 2024, as revealed by a forensic report from CrowdStrike, indicating unauthorized access dating back to August. This earlier access utilized compromised support credentials, raising questions about security practices and the extent of information theft affecting over 60 million students.
Key points
- Unauthorized access occurred between August 16 and September 17, 2024.
- The same compromised support credentials were used in the December breach.
- PowerSchool detected unauthorized access from December 19 to December 28, 2024.
- Coordinates of access were the PowerSchool PowerSource customer support portal.
- CrowdStrike could not definitively link the two breaches due to insufficient log data.
- Potential for breach prevention exists if compromised credentials had been updated earlier.
Why it matters
- The breach highlights weaknesses in network security that could relate to increased cyber vulnerabilities in educational technologies.
- Concerns over student data privacy have escalated alongside growing reliance on digital platforms in education.
- This incident may resonate with trends in IT by 2025, emphasizing the need for robust cybersecurity measures and proactive credential management.
The early hacking of PowerSchool's network and subsequent December breach underscores the critical need for timely security updates and raises alarms regarding the protection of sensitive student data.