We want to make you aware of a recent update related to the PowerSchool data breach that was originally reported in January of this year. Yesterday, several school and North Carolina Department of Public Instruction (NCDPI) employees across the state received messages from threat actors claiming to have access to student and teacher data from that breach.
Based on the current status of our investigation, we believe that the threat actors have access to the same data tables that were originally compromised. These data tables include student and staff names, contact information, social security numbers (limited student social security numbers), birthdays, medical notes, passwords (limited) and parent/guardian information.
NCDPI has already notified appropriate law enforcement agencies, who are actively investigating this incident.
We want to assure you that CCS and NCDPI have done everything possible to protect this information. PowerSchool, the vendor responsible for the incident, has taken full responsibility for the breach and is providing support services for those impacted.
As we continue to work through this incident, we are committed to supporting students, families and staff with transparency and care.