PowerSchool Data Updates

February 5, 2025:

PowerSchool has posted its Notice of Data Breach For Individuals in the United States to share some important information regarding the recent cybersecurity incident involving personal information belonging to current or former students and teachers of schools and districts like the Nampa School District that use or used software called PowerSchool Student Information System (SIS). https://www.powerschool.com/security/sis-incident/notice-of-united-states-data-breach/. The PowerSchool Notice contains important instructions regarding enrolling in two year of complimentary identity protection services through Experian.

Monday January 27, 2025

From PowerSchool:

Dear Valued Customers,

I am writing today to inform you that our investigation and data review into the scope of the cybersecurity incident has continued in earnest. As part of our commitment to keeping you informed, we are reaching out with an update on the latest steps we have taken in response to this incident and what you can expect over the coming days.

Importantly, this message requires no action on your part and serves simply as an update.

This afternoon, PowerSchool began the process of filing state attorneys general notifications across applicable U.S. jurisdictions on behalf of customers who did not opt-out of our offer to do so. PowerSchool has also started the process of notifying Canadian regulators.

For our U.S. customers, you may also have notification requirements with your state’s Department of Education. Since many customers have already notified and are in close contact with their state’s Department of Education, PowerSchool will defer to you on making these notifications.

In the coming days, PowerSchool will begin providing formal legal notice of the cybersecurity incident to current and former students (or their parents / guardians as applicable) and educators whose information was determined to be involved.

A direct email notification will be distributed by Experian on behalf of PowerSchool in the coming weeks to applicable current and former students (or their parents / guardians as applicable) and educators for whom we have sufficient contact information. PowerSchool will also launch a website and distribute a media release to ensure we reach as many involved individuals as possible and provide them with resources to protect their information. Importantly, these notices will include instructions for involved individuals on how to enroll in the credit monitoring and identity protection services that are being offered by PowerSchool.

PowerSchool will also be providing you with communications materials to help navigate conversations with families and educators as part of our effort to support you with the expected inquiries from your community members.

Thank you for your ongoing patience and partnership.

Hardeep Gulati

Chief Executive Officer, PowerSchool

Important Update on PowerSchool Cybersecurity Incident

Dear Nampa School District Students, Parents, and Staff,

We want to inform you about a cybersecurity breach involving PowerSchool, a vendor providing student information system services to schools across the nation, including ours. PowerSchool has notified us that their systems were compromised on December 21, 2024, potentially affecting local districts in Idaho and beyond.

What We Know So Far

PowerSchool became aware of this incident on December 28, 2024, and determined that unauthorized access was gained through compromised credentials. Upon detecting the breach, PowerSchool acted swiftly, involving law enforcement, securing their systems, and enlisting cybersecurity experts to address the situation. They have assured us that the breach has been contained, and they’ve received assurances from the responsible party that the data has been deleted.

Potentially Affected Information

While PowerSchool’s investigation is ongoing, preliminary findings suggest that personally identifiable information (PII) for students, parents, and staff could have been accessed. This may include:

• Names, addresses, and contact details

• Certain health and grade information for current and former students

• Parent/guardian names and addresses

Next Steps

PowerSchool has committed to providing credit monitoring and identity protection services to affected individuals, and we will share details about these resources as they become available. Our district’s IT team, in collaboration with legal counsel and cybersecurity experts, is actively monitoring the situation and ensuring the continued safety of our systems.

Support and Updates

We will continue to provide transparent updates as PowerSchool shares more information about the scope of the breach and any actions families or staff may need to take.

Thank you for your patience and understanding as we navigate this situation together. Safeguarding the privacy and security of our students, families, and staff remains our highest priority.

Sincerely,

Nampa School District