The student information system used by schools in southwestern Pennsylvania has struggled with cybersecurity breaches

The student information system used by schools in southwestern Pennsylvania has struggled with cybersecurity breaches

School districts across southwestern Pennsylvania could be affected by a cybersecurity breach in the PowerSchool global student information system, the company said.

PowerSchool is a web-based platform that allows educators to store student information — including academic performance, class schedule, demographics, behavior and health, according to its website. Launched in 1997, the program serves more than 45 million students in 15,000 schools in 90 countries.

The student information platform used by dozens of local school districts experienced a cyberattack via one of its customer portals, PowerSource, on Dec. 28, according to a company statement obtained by TribLive.

“PowerSchool is not experiencing or expecting any business interruptions and will continue to provide services to our customers as usual,” the statement said. “We have no evidence that other PowerSchool products were affected by this incident.”

Some students’ personal information, including Social Security numbers and medical information, was affected by the breach, a PowerSchool spokesman said. The company is working to determine which people were affected.

The Penn-Trafford and Franklin Regional school districts were notified of the breach last week and sent letters to parents Friday indicating that names and addresses of students and parents could be among the affected data.

Neither district stores students’ Social Security numbers on PowerSchool. Franklin Regional Superintendent Gennaro Piraino said the district does not believe any student medical information was accessed.

The Fox Chapel Area School District sent a letter to parents Thursday about the violation. Either the district or PowerSchool will contact families if their information is affected.

“The Fox Chapel Area School District is extremely disappointed that PowerSchool experienced this unfortunate incident,” Superintendent Mary Catherine Reljac said in a statement. “Although this occurred within the PowerSchool infrastructure, the district is independently reviewing its own records and will continue to take privacy and data security very seriously.”

Although the Mt. Pleasant Area School District uses PowerSchool, the company told the school that none of its students were affected by the breach, according to a statement posted on the district’s website Saturday.

The breach “only affected Powerschool SIS (Student Information System) customers that they host on their cloud services,” the statement said. Mt. Pleasant Area uses a separate student information system called eSchool Plus, hosted on local servers, the statement said.

Ligonier Valley, Derry Area, Yough, Monessen, Highlands, Mt. Lebanon and Canon-McMillan are among the other school districts in the region that report using PowerSchool on their websites.

PowerSchool’s cybersecurity response team is working with third-party cybersecurity experts to resolve the situation. The company declined to say how many schools were affected by the breach or when the problem will be resolved.


Quincey Reese is a TribLive reporter covering the Greensburg and Hempfield areas. She also reports for the Penn-Trafford Star. The Penn Township native joined the Trib in 2023 after working with the company for two summers as a Jim Borden Fellowship intern. She can be reached at [email protected].

Categories:
Allegheny | Education | Local | News | Regional | Top Stories | Westmoreland

Leave a Reply

Your email address will not be published. Required fields are marked *