Inside the Largest U.S. School Data Breach: PowerSchool’s 2024 Ransomware Attack
In September 2024, PowerSchool, a leading education software provider, suffered a devastating ransomware attack orchestrated by Matthew Lane, who used compromised contractor credentials to access and exfiltrate sensitive records. Nearly 70 million student and teacher records were stolen, with the data held hostage for a $2.9 million ransom, which was ultimately paid. The breach led to subsequent extortion attempts on multiple school districts and resulted in over $14 million of financial losses and lifetime risks of identity theft for millions of affected individuals. Lane was sentenced in October 2024 to four years in prison, three years supervised release, and over $14 million in restitution. This incident highlights the urgency of addressing third-party risks, as threat actors increasingly exploit supply chain weaknesses to orchestrate high-impact ransomware attacks. Regulatory scrutiny and ransomware activity targeting the education sector continue to rise, underscoring the need for robust zero trust, lateral movement prevention, and data protection strategies.
Kill Chain
