A recent data breach targeting PowerSchool has exposed sensitive student information, highlighting how easily vast amounts of personal data can fall into the hands of hackers. Among the leaked data were details on special education status, mental health conditions, disciplinary records, and even parent restraining orders—raising serious concerns about student privacy and data security.
PowerSchool, a widely used education software provider, confirmed that approximately 6,500 of its more than 18,000 clients were affected by the breach, which was disclosed last month. While the company has not revealed the total number of individuals impacted, the hacker allegedly behind the attack claims to have accessed records for 62.4 million students and 9.5 million teachers.
Many school districts affected by the breach have provided minimal details on what was exposed. However, interviews with parents and administrators, along with notifications sent to affected families, reveal that highly sensitive categories of student data were compromised.
Sensitive Data Exposed
PowerSchool acknowledged that in some cases, the breach exposed medical alert fields containing health information that parents had shared with schools. The company initially cited food allergies as an example, but one parent interviewed disclosed that her daughter’s anxiety disorder and record of receiving therapy were also included in the compromised data.
In Massachusetts, a notification email sent to parents in the Wakefield school district confirmed that the breach exposed:
- Custody alerts—including restraining orders, custody agreements, and other legal documents for 31 past and current students.
- Special education records, affecting 708 students, revealing individualized education plans (IEPs) and 504 designations.
- Medical alerts, impacting 1,384 students, detailing various health concerns.
Wakefield school officials classified this as sensitive information protected by federal and state laws governing student records.
In Toronto, the city’s school district—the largest in Canada—confirmed that students’ medical alerts, special education status, and disciplinary records dating back to 2017 were also exposed in the breach. The district serves 239,000 students across nearly 600 schools, making this an extensive compromise of personal data.
PowerSchool’s Response and Lack of Transparency
When asked why it did not initially disclose that special education status, custody agreements, and disciplinary records were part of the breach, PowerSchool responded that these fields were customized add-ons implemented by individual schools rather than part of the core system.
However, education experts argue that this explanation does not absolve PowerSchool of responsibility. Adam Larsen, an assistant superintendent in Illinois and a data consultant for schools, confirmed that some of his clients’ school districts had mental health and special education data compromised.
“The kinds of things that got snagged by the hackers are statuses—whether a student has an IEP, a 504 plan, an anxiety disorder, or an order of protection,” Larsen explained. “This is high-level information that staff rely on to support students, and now it’s in the hands of bad actors.”
Larsen also noted that school districts impacted by the breach are furious over the failure to protect student data.
“They feel like stewards of this information, and they never expected a threat vector like this to expose it.”
A Disturbing Pattern of Education Sector Cyberattacks
This breach is just the latest in a disturbing trend of cyberattacks targeting education institutions. With schools collecting more student data than ever before—including mental health records, academic performance, and behavioral history—they have become a prime target for hackers looking to exploit valuable personal information.
Experts warn that these types of breaches can have long-term consequences, with leaked records potentially being used for identity theft, extortion, or even social engineering attacks.
The Fallout: What Comes Next?
The PowerSchool breach raises serious questions about how well student data is being protected—and what needs to change to prevent future attacks. With the scale of this breach potentially affecting millions, schools, parents, and policymakers must demand greater transparency, accountability, and security measures from education technology providers.
As more details emerge, one thing is clear: schools must do better to safeguard the personal and sensitive data of students and their families—before another attack exposes even more lives to unnecessary risk.
Help us bring real change! Corporate lobbying has corrupted our system for too long, and it’s time to take action. Please sign and share this petition—your support is crucial in restoring accountability to our government. Every signature counts! Thank you!
https://www.ipetitions.com/petition/restore-our-republic-end-lobbying
Support truth, health, and preparedness by shopping the Alex Jones Store through our link. Every purchase helps sustain independent voices and earns us a 10% share to fuel our mission. Shop now and make a difference!
https://thealexjonesstore.com?sca_ref=7730615.EU54Mw6oyLATer7a


