PowerSchool hacker now extorting individual school districts
The hacker responsible for the December cyberattack is now extorting schools one at a time, threatening to reveal the previously stolen student and instructor data if a ransom is not paid, according to a warning from PowerSchool.
According to a statement released to BleepingComputer, PowerSchool is aware that a threat actor has attempted to extort several school district customers using information from the previously publicized December 2024 incident.
Since data samples match the data that was stolen in December, we do not think this is a fresh occurrence. We are closely collaborating with our customers to provide them with help, and we have reported this issue to law enforcement in both the US and Canada. We deeply regret these developments; it hurts us to see evil actors threaten...