PowerSchool Data Breach Incident

Individual Attacks

January 10, 2025

In light of the recent PowerSchool incident in which the personally identifiable information (PII) of students and teachers was breached, the NJCCIC is sharing the Identity Theft and Compromised PII document to assist schools in providing recommendations to those impacted. In some but not all instances of the PowerSchools breach, the data exposed includes individuals’ names, addresses, Social Security numbers, and some medical data, which can be used for identity theft. The students whose information was breached may be particularly at risk as it is uncommon for minors to have identity monitoring services and, therefore, identity theft activity could go unnoticed more easily.

We have also included the NJCCIC Advisory sent out on Wednesday evening, which provides information on how schools can verify if and to what extent their data was exposed.

Please do not hesitate to contact the NJCCIC at njccic@cyber.nj.gov with any questions. Also, for more background on our recent cybersecurity efforts, please visit cyber.nj.gov.