TechCrunch has heard from PowerSchool customers that the scale of the data breach could be “massive.” But PowerSchool has repeatedly declined to say how many schools and individuals are affected, despite telling TechCrunch that it had “identified the schools and districts whose data was involved in this incident.”

The breach of a vendor's computer systems affected students dating back to the 2017-18 school year, but no Social Security numbers, financial or health records were exposed, the school district said.

A cyber attack in late 2024 exposed names, dates of birth, student identification numbers and Medicaid identification numbers, but not Social Security numbers or financial information, of current and former students.

A third-party administrator of 403(b) and 457(b) plans experienced a cyber breach last month, exposing sensitive information of more than 48,400 retirement plan participants.