PowerSchool Breach Exposes 62 Million Student Records

On December 28, 2024, a hacker used a compromised subcontractor credential to access PowerSchool's customer support portal and exfiltrated data on over 62 million students and nearly 10 million teachers — the largest breach of children's data in US history.

Exposed data included Social Security numbers, medical conditions, and disciplinary records. PowerSchool notified customers on January 7, 2025. The attacker, 20-year-old Matthew Lane, was later sentenced to four years in federal prison in October 2025.