On December 22nd, 2024, an unknown user exported data belonging to our staff and students for our student information system PowerSchool. HPS was notified on Tuesday January 7th. The details of this breach remain under investigation, but it appears to have affected great number of school districts across the country who are PowerSchool customers.
This breach was caused by a compromised support account belonging to PowerSchool. PowerSchool has assured customers this breach has been fully contained and any compromised accounts disabled. PowerSchool has also communicated that they believe all copies of this data has been deleted by the threat actor.
HPS does not store Social Security Numbers in PowerSchool for staff or students. Documents uploaded during the registration process (birth certificates, proof of residency, etc), were not accessed. Nor is there any evidence that username/passwords for staff or families were compromised. It appears to have primarily been directory and demographic data.