PowerSchool is a organization tracked across 15 threat clusters and 27 intelligence report mentions on ThreatCluster. First observed November 18, 2025; most recent activity June 15, 2026.
PowerSchool is a leading education technology company that provides a School Information System (SIS) and other platforms used by school boards and districts to manage student data. It has become a focal point of regulatory and security scrutiny following a massive cyberattack/mega-breach, underscoring governance and privacy risks associated with edtech providers and the handling of student information.
A recent study identified 28 malicious LLM proxy routers that can modify AI service responses and access sensitive credentials. The research tested 28 paid routers and 400 free routers, revealing that nine injected…
Instructure, the company behind the Canvas learning management system, confirmed a significant data breach involving the ShinyHunters hacking group. The attackers claim to have stolen over 3.65TB of data, potentially…
A global cyberattack attributed to the hacking group ShinyHunters has disrupted the Canvas learning management system, affecting nearly 9,000 schools worldwide. The attack led to significant outages, prompting…
Matthew Lane, a 20-year-old hacker, was sentenced to four years in federal prison for orchestrating a massive data breach of PowerSchool, a platform managing student data for 60 million children and 10 million teachers.…
Ezekiel Dean Potter, a former IT worker at Saydel Community School District, was sentenced to 21 months in prison for a series of cyberattacks against the district after his termination in April 2023. Over 21 months, he…
In March 2026, the ShinyHunters extortion group executed a data breach targeting the Infinite Campus K-12 student information system, compromising personal information of over 137,000 school staff accounts. The attack…
In December 2024, a significant cyberattack on PowerSchool led to the theft of personal information affecting millions of Canadians. The Ontario Information and Privacy Commissioner conducted an investigation, and the…
A cyberattack has compromised the personal information of 5.2 million Canadians, primarily students, with a ransom demand of $2.85 million in bitcoin. The attack targeted a company that manages student data, leading to…
In December 2024, PowerSchool detected unauthorized access to its Student Information System, affecting approximately 16,000 schools and nearly 50 million students across North America. By January 2025, it was confirmed…
Illuminate Education, an Edtech provider, faced enforcement actions from the FTC and a $5.1 million settlement with the Attorneys General of California, Connecticut, and New York due to a data breach that exposed…