The world of education has been shaken by a new wave of cyber threats. PowerSchool, a leading provider of education software and cloud services to over 60 million students globally, has revealed that hackers are attempting to extort multiple school districts in the United States using stolen data from its U.S. student information database.

In December 2024, PowerSchool disclosed that personal information from its U.S. student information database had been stolen in a cybersecurity incident. The data stolen varied but could have included names, contact information, dates of birth, limited medical alert information, and social security numbers. This breach was a major concern for the company, which serves students in nearly 100 countries.

PowerSchool has now revealed that hackers are attempting to extort multiple school districts, using the stolen data as leverage. The extortion attempts rely on the same data stolen during the original breach, and four school districts have been contacted so far. However, it is unclear where these districts are located.

In a surprising move, PowerSchool has acknowledged that it paid a ransom for an undisclosed amount to the hackers responsible for the breach. The company made this decision because it believed it was in the best interest of its customers and the students and communities they serve. However, it is worth noting that the company did not disclose whether the same hackers behind the original attack were also behind the extortion attempts.

A person familiar with the extortion attempts told Reuters that four school districts had been contacted, but the location of these districts was unknown. The investigation implies that the hackers are using anonymity to carry out their attacks, which has made it difficult for authorities to track them down.

PowerSchool did not respond to a request for comment on this matter. However, the company's decision to pay the ransom and its efforts to mitigate the impact of the breach demonstrate its commitment to protecting its customers and their data.

The revelation that hackers are attempting to extort school districts using stolen data from PowerSchool highlights the ongoing threat of cyber attacks in the education sector. As schools and districts struggle to keep up with the latest security measures, it is essential for them to remain vigilant and take proactive steps to protect themselves against such threats.

Subscribe to our Chief Editor's Week in Review Our chief editor shares analysis and picks of the week's biggest news every Saturday. Get our pick of top stories and thought-provoking articles in your inbox Stay updated with notifications for breaking news and our best stories Join our channel for the top reads for the day on your preferred chat app