PowerSchool paid a hacker's ransom, but now schools say they are being extorted | TechCrunch
Briefly

Following the December 2024 cyberattack on PowerSchool, the company paid a ransom to have stolen student data deleted. However, reports have emerged that at least one school district, along with others across North Carolina, is now facing extortion demands linked to that data. PowerSchool had deemed paying the ransom necessary to protect against public data exposure, but cybersecurity experts caution that such payments often lead to further victimization. The company acknowledges the new extortion attempts from hackers, raising concerns about the efficacy of ransom payments in the first place.
Months after PowerSchool paid a ransom for the deletion of stolen student data, a school district reports being extorted, raising questions about the effectiveness of such payments.
PowerSchool's decision to pay a ransom to mitigate the risk of data becoming public has backfired, as threats using that data resurface against its clients.
Cybersecurity experts warn against paying ransoms, as there are no guarantees that hackers will delete stolen data and may continue to extort victims.
The Toronto district school board, serving about 240,000 students, reports being approached by a threat actor for ransom related to the PowerSchool data breach.
Read at TechCrunch
[
|
]