TechCrunch has heard from PowerSchool customers that the scale of the data breach could be “massive.” But PowerSchool has repeatedly declined to say how many schools and individuals are affected, despite telling TechCrunch that it had “identified the schools and districts whose data was involved in this incident.”

PowerSchool has published a long-awaited CrowdStrike investigation into its massive December 2024 data breach, which determined that the company was previously hacked over 4 months earlier, in August,

Rocky View Schools has provided another update about the PowerSchool Data Breach and has shared that PowerSchool has released its third-party Investigation Report prepared by CrowdStrike. According to the report,

In a letter sent to affected customers last week, seen by TechCrunch, PowerSchool confirmed that an investigation into the incident has revealed that its network “experienced unauthorized activity prior to December,” which CrowdStrike dated back to at least August 2024.

Hackers used compromised credentials to access PowerSchool’s PowerSource portal months before the December 2024 data breach.

The St. Croix Falls, Wisconsin, school district filed a federal lawsuit against education software behemoth PowerSchool Tuesday, kicking into motion a national campaign to hold the company accountable for what cybersecurity experts predict is among the largest student data breaches in history.