Malware stole internal PowerSchool passwords from engineer’s hacked computer

Here’s the requested information extracted from the provided text:

Company Information

• Startup: PowerSchool

Acquisition

• Acquired by: Bain Capital
• Transaction Value: $5.6 billion
• Date of Acquisition: Last year (2024)

Cyberattack Details

• Incident Discovery Date: December 28, 2024
• Nature of the Attack: Data breach exposing sensitive data of schoolchildren and teachers

Key Individuals & Organizations

• Subcontractor: (Unnamed)
• Incident Response Firm: CrowdStrike
• PowerSchool Spokesperson: Beth Keebler

Data Exposed

• Types of Exposed Data:
  • Social Security numbers
  • Grades
  • Demographic information
  • Medical information

Security Practices

• Issues Identified: Lack of multi-factor authentication on the compromised account

Incident Follow-up

• Ongoing Investigation: PowerSchool is working with CrowdStrike
• Data Review Status: Ongoing

This summary captures the relevant information regarding PowerSchool, the acquisition by Bain Capital, the cyberattack, and the parties involved.

Source link

2025-01-17 17:05:43