One of the largest school software platforms in the U.S. was compromised in early 2025, exposing the personal data of over 70 million people. Here’s what happened, and what it tells us about modern digital infrastructure

The story centers on PowerSchool, a major U.S. school software provider, which disclosed in January 2025 that attackers had accessed data through a compromised credential in its internal support portal. Reporting at the time said the breach may have exposed student and parent information such as names, contact details, addresses, Social Security numbers, grades, and some medical information, affecting millions of people across North America. One source described PowerSchool as used by more than 50 million students, and later reporting called the incident the largest breach of American children’s personal information to date. The broader significance is that school districts often centralize highly sensitive records in a handful of cloud education platforms, so a single provider compromise can affect huge numbers of students, families, and staff at once. The reporting also highlighted a basic security failure: an executive acknowledged a breached account lacked multi-factor authentication, underscoring how a stolen login can become a large-scale data exposure when an upstream vendor is trusted by thousands of institutions.

✨ AI-generated background, compiled from web sources — not editorial content.

More coverage

• School Software Provider: Latest Target of Data Hack - Monjur (monjur.com)
• Children's data hacked after school software firm missed basic ... (districtadministration.com)
• Biggest Data Breaches in US History (Updated 2025) - UpGuard (upguard.com)