Staff Resources
Quicklinks
Michigan Secure
PowerSchool Data Breach
| Dear PowerSchool User or Parent/Guardian of User: | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| You are receiving this notice on behalf of (the “named individual”) from PowerSchool. As you may know, PowerSchool provides software and services to your current or former school or the current or former school of a person to whom you are a parent or guardian. In compliance with State laws, we are writing to share with you some important information regarding a recent cybersecurity incident involving personal information belonging to the named individual. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
What Happened? | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| On December 28, 2024, PowerSchool became aware of a cybersecurity incident involving unauthorized exfiltration of certain personal information from PowerSchool Student Information System (SIS) environments through one of our community-focused customer support portals, PowerSource. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
What Information Was Involved? | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Due to differences in customer requirements, the types of information involved in this incident included one or more of the following, which varied by person: name, contact information, date of birth, Social Security Number, limited medical alert information, and other related information. At this time, we do not have evidence that the named individual’s Social Security Number was involved. At this time, we do not have evidence that limited medical alert information for the named individual was involved. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
What Are We Doing? | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| PowerSchool is offering two years of complimentary identity protection services to students and educators whose information was involved. For adult students and educators whose information was involved, this offer will also include two years of complimentary credit monitoring services. If your personal information was involved in this incident and you are interested in enrolling in credit monitoring or identity protection, please follow the steps for either Option 1 or Option 2 below: | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
As soon as PowerSchool learned of the incident, we engaged cybersecurity response protocols and mobilized senior leadership and third-party cybersecurity experts to conduct a forensic investigation of the scope of the incident and to monitor for signs of information misuse. We are not aware at this time of any identity theft attributable to this incident. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
What Can You Do? | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| You are encouraged to remain vigilant against incidents of identity theft and fraud by reviewing account statements for suspicious activity. PowerSchool will never contact you by phone or email to request your personal or account information. The enclosed “General Information About Identity Theft Protection” provides further information about what steps you can take. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Other Important Information. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| If you have any questions or concerns about this notice, please call 833-918-9464, Monday through Friday, 8:00am through 8:00pm Central Time (excluding major US holidays). | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Sincerely, | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| The PowerSchool Team | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| GENERAL INFORMATION ABOUT IDENTITY THEFT PROTECTION | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| It is always advisable to regularly review statements from your accounts and periodically obtain your credit report from one or more of the national credit reporting companies. You may obtain a free copy of your credit report online at www.annualcreditreport.com by calling toll free 1.877.322.8228, or by mailing an Annual Credit Report Request Form (available at www.annualcreditreport.com) to: Annual Credit Report Request Service. P.O. Box 105281, Atlanta, GA, 30348-5281. You may also purchase a copy of your credit report by contacting one or more of the three national credit reporting agencies listed below: | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Fraud Alert: You may contact the fraud department of the three major credit bureaus to request that a “fraud alert” be placed on your file. A fraud alert notifies potential lenders to verify your identification before extending credit in your name. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Security Freeze for Credit Reporting Agencies: You may request a security freeze on your credit reports. A security freeze prohibits a credit reporting agency from releasing any information from a consumer’s credit report without written authorization. However, please be aware that placing a security freeze on your credit report may delay, interfere with, or prevent the timely approval of any requests you make for new loans, credit mortgages, employment, housing or other services. It is free to place, lift or remove a security freeze. You must separately place a security freeze on your credit report at each credit bureau. To do so, you must contact the credit bureaus by phone, mail, or secure electronic means: | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| To request a security freeze, you will need to provide the following: | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| If you request a freeze online or by phone, the agency must place the freeze within one business day. The credit bureaus have three business days after receiving a request by mail to place a security freeze on your credit report, and they must also send confirmation to you within five business days and provide you with a unique personal identification number (PIN) or password, or both that can be used by you to authorize the removal or lifting of the security freeze. To lift the freeze to allow a specific entity or individual access to your credit report, you must contact the credit reporting agencies and include (1) proper identification; (2) the PIN number or password provided to you when you placed the security freeze; and (3) the identities of those entities or individuals you would like to receive your credit report or the specific period of time you want the credit report available. You also have rights under the federal Fair Credit Reporting Act (FCRA). These include, among others, the right to know what is in your file; to dispute incomplete or inaccurate information; and to have consumer reporting agencies correct or delete inaccurate, incomplete, or unverifiable information. For more information about the FCRA, please visit http://files.consumerfinance.gov/f/documents/bcfp_consumer-rights-summary_2018-09.pdf or http://www.ftc.gov. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Steps You Can Take if You Are a Victim of Identity Theft | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Additional Steps to Avoid Identity Theft: The FTC has further information about steps to take to avoid identity theft at: http://www.ftc.gov/idtheft; calling 1-877-IDTHEFT (438-4338); or write to Consumer Response Center, Federal Trade Commission, 600 Pennsylvania Ave., N.W., Washington, D.C. 20580. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
State Specific Information District of Columbia residents can obtain information from the District of Columbia’s Attorney General’s Office regarding steps to take to avoid identity theft. This office can be reached by visiting the website at https://oag.dc.gov/, calling (202) 727-3400, or visiting 400 6th Street NW Washington, D.C. 20001. Iowa residents may contact law enforcement or the Iowa Attorney General’s Office to report suspected incidents of identity theft. This office can be reached by visiting the website at www.iowaattorneygeneral.gov, calling (515) 281-5164 or requesting more information from the Office of the Attorney General, Hoover State Office Building, 1305 E. Walnut Street, Des Moines, IA 50319. Massachusetts residents are reminded that you have the right to obtain a police report and request a security freeze as described above. There is no charge to place a security freeze on your account; however, you may be required to provide the credit reporting agency with certain personal information (such as your name, Social Security Number, date of birth and address) and proper identification (such as a copy of a government-issued ID card and a bill or statement) prior to its honoring your request. Maryland residents can learn more about preventing identity theft from the Maryland Office of the Attorney General, by visiting their web site at www.marylandattorneygeneral.gov, calling the Identity Theft Unit at 1.410.576.6491, or requesting more information at the Identity Theft Unit, 200 St. Paul Place, 16th Floor, Baltimore, MD 21202. New Mexico residents are reminded that you have the right to obtain a police report and request a security freeze as described above and you have rights under the Fair Credit Reporting Act as described above. New York residents can learn more about preventing identity theft from the North York Office of the Attorney General, by visiting their web site at https://ag.ny.gov/resources/individuals/credit-lending/identity-theft, calling 1.800.771.77755 or requesting more information from the New York Attorney General’s Office, 28 Liberty St, New York, NY 10005. North Carolina residents can learn more about preventing identity theft from the North Carolina Office of the Attorney General, by visiting their web site at https://ncdoj.gov/protecting-consumers/identity-theft/, calling 1.877.566.7226 or requesting more information from the North Carolina Attorney General’s Office, 9001 Mail Service Center Raleigh, NC 27699-9001. Oregon residents may obtain information about preventing identity theft from the Oregon Attorney General’s Office. This office can be reached by visiting the website at www.doj.state.or.us, calling (503) 378-4400 or requesting more information from the Oregon Department of Justice, 1162 Court Street NE, Salem, OR 97301-4096. Rhode Island residents are reminded that you have the right to obtain a police report and request a security freeze as described above. The consumer reporting agencies may require that you provide certain personal information (such as your name, Social Security Number, date of birth and address) and proper identification (such as a copy of a government-issued ID card and a bill or statement) prior to honoring your request. Residents can learn more by contacting the Rhode Island Office of the Attorney General by phone at 1.401.274.4400 or by mail at 150 South Main Street, Providence, Rhode Island 02903. South Carolina residents may access educational resources and the availability of consumer assistance from the South Caroline Department of Consumer Affairs. This office can be reached by visiting the website at https://consumer.sc.gov/, calling (803) 734-4200, or visiting 293 Greystone Boulevard, Ste. 400 Columbia, SC 29210. Vermont residents may learn helpful information about fighting identity theft, placing a security freeze, and obtaining a free copy of your credit report on the Vermont Attorney General’s website at http://www.atg.state.vt.us. |