PowerSchool has initiated the process of notifying individuals affected by a cybersecurity incident that occurred in December 2024. Coal City Community Unit School District 1 was informed this week about the breach involving its Student Information System (SIS) provided by PowerSchool.
Earlier in January, PowerSchool Group LLC notified Coal City Schools that an unauthorized third party accessed certain student data as part of a global incident affecting several PowerSchool users, including District 1.
The notification process began on January 29, targeting individuals whose information was involved. The compromised data includes students' names, contact details, birth dates, limited medical alert information, and other related information. Importantly, no passwords, Social Security numbers, or financial information of Coal City students or families were impacted.
In response to the breach, PowerSchool activated cybersecurity response protocols and reported no identity theft attributable to the incident. The company has also begun notifying state attorney general offices and engaged Experian for identity protection and credit monitoring services. Two years of complimentary services are being offered to all current and former students and educators affected by the breach.
Experian will send email notifications to those with sufficient contact information on behalf of PowerSchool in the coming weeks. A dedicated toll-free call center has been established to assist families with inquiries regarding the incident and credit monitoring services. Details about accessing these services will be included in emails sent to families. Those who do not receive an email can visit https://www.powerschool.com/security/sis-incident/notice-of-united-states-data-breach/ for more information on activating Experian's offering.
PowerSchool states that the incident has been contained with no evidence of continued unauthorized activity. To prevent future incidents, the company reports it has enhanced its policies and controls while making significant investments in cybersecurity defenses.