Hacker Access to Powerschool Network Months Before a Mass District of December

Hacker compromises American giant Powerschool months before its “mass” data breach in December, according to already published forensic report In the incident conducted by the US Cybersecurity Company Crowdstrike.

In a letter sent to the clients affected last week, seen by TechCrunch, Powerschool confirmed that an investigation into the incident revealed that his network “had been experiencing an unauthorized activity before December”, which Crowdstrike dates from at least August 2024.

Early Powerschool said it had discovered unauthorized access to its systems between December 19 until the compromise on December 28, 2024.

In its report, Crowdsstrike said a hacker using the same compromised support powers used in December’s violation to access the Powerschool network between August 16, 2024 and September 17, 2024. The accredited data were used to access the Powerschool Powersour, the same to access to Powerschool in the company’s school system (SIS).

Powersource “allows a support technician with sufficient permissions to gain access to copies based on customer support database”, according to Crowdstrike.

Crowdstrike said it did not find “sufficient evidence to attribute this activity to the participant in the threat responsible for the activity in December 2024” as Powerschool’s Log data “did not go back enough”. However, Crowdstrike’s findings suggest that Powerschool’s violation for December could be prevented if the compromised powers are changed earlier.

Asked by TechCrunch on Monday, Powerschool spokesman Beth Kigbler declined to say if the company was aware of this more accessible access to its network before the Crowdstrike report was launched.

There are many questions left to violate Powerschoolas the total number of persons concerned. Powerschool repeatedly refuses to provide an accurate figure reports Suggest that it has gained access to the personal information of more than 60 million students.