Data Breach Updates
Data Breach Updates
Naviance Settlement Notice
4/6/2026
What is the notice you may have received?
Some families received a legally required email from Kroll Settlement Administration regarding a proposed class action settlement related to Naviance.
That email is legitimate, valid, and informational. It was sent as part of a court approved notification process to ensure individuals have the opportunity to review the settlement and decide whether to take any action.
We want to be very clear:
- This matter did NOT involve a data breach.
- No student data was compromised.
- No district or school data systems were accessed or exposed.
PowerSchool has confirmed that customer data in Naviance was not impacted and that student information remains protected.
Why was there a settlement?
While PowerSchool is confident that its products and practices appropriately protect student information and comply with privacy laws, the company chose to settle this matter in order to avoid the time, cost, and uncertainty of continued litigation and to remain focused on supporting our schools and improving its products and services.
The settlement does not represent an admission of wrongdoing. PowerSchool and the other defendants deny these allegations and maintain that the claims lack merit.
PowerSchool’s commitment to student privacy
Protecting student information is a top priority. PowerSchool states that it strictly follows all applicable student privacy laws, including FERPA and COPPA, and continues to invest in strong privacy and governance practices.
You can learn more about PowerSchool’s approach to data protection by reviewing their global privacy statement on the PowerSchool privacy page.
What should families do next?
If you received the settlement notice, we encourage you to:
- Review the information provided in that notice
- Decide whether you wish to take any action outlined in the settlement materials
Questions?
If you have questions or concerns, students and their legal guardians may contact the Settlement Administrator as follows:
|
|
|
|
|
|
|
|
|
PowerSchool
5/21/2025
College student charged in connection with PowerSchool data breach
5/07/2025
PowerSchool issues the following letter to Districts:
Dear Valued Customers:
We are writing to inform you of a recent development related to the cybersecurity incident PowerSchool experienced in December 2024.
PowerSchool recently became aware that a threat actor has reached out to some PowerSchool SIS customers in an attempt to extort them using data from the previously reported December 2024 incident. We do not believe this is a new incident, but we wanted our customers to be informed, nonetheless.
As you all are likely aware, in the days following our discovery of the December 2024 incident, we made the decision to pay a ransom because we believed it to be in the best interest of our customers and the students and communities we serve. It was a difficult decision, which our leadership team did not make lightly. As is always the case with these situations, there was a risk that the bad actors would not delete the data they stole, despite assurances and evidence that were provided to us.
In light of this, I want to take a moment to remind you all that following the December 2024 incident, PowerSchool also offered and made widely available credit monitoring and identity protection services for a period of two years to students and faculty of our PowerSchool SIS customers, regardless of whether they were individually involved. We encourage you all to take this opportunity to remind your communities that these services are still available. If you choose to send an update to your families and educators, we have included a suggested message for you to send below.
As a reminder, information about credit monitoring and identity protection services and enrollment can be found on our website:
- For customers in the U.S.: FIND MORE INFORMATION HERE
- For customers in Canada: FIND MORE INFORMATION HERE
We sincerely regret the occurrence of the 2024 incident. We will continue supporting our valued customers and law enforcement as we work through this together. If you have any questions or concerns, please don’t hesitate to reach out to your CSM.
Sincerely,
Hardeep Gulati
Chief Executive Officer, PowerSchool
3/18/2025
Crowd Strike has issued their investigation report summarizing their findings. Please click HERE to access and review this report.
1/8/2025
PowerSchool recently experienced a cybersecurity incident involving unauthorized access to certain information in the PowerSchool Student Information System (SIS).
Please click HERE for updates and information on how this impacted the Colchester Public Schools.
Most recent PowerSchool information can be found on their website.
AIMSweb 1.0
On July 24, 2019, Colchester Public Schools was informed of a data breach of the AIMSweb 1.0 math software that occurred in November of 2018. Only students' first and last names in grades K-2 were affected by this breach. AIMSweb 1.0 is working with law enforcement to identify the cause of the breach, and they will be reviewing their security measures to safeguard student data and prevent against future incidents.
