PowerSchool Cybersecurity Incident
Need to translate this website? Click this icon, found in the upper left corner of the page.
¿Necesita traducir este sitio web? Haga clic en este icono que se encuentra en la esquina superior izquierda de la págin.
Dear Parent or Guardian,
We recently learned about a potential data security incident involving PowerSchool, the system we use to manage student information. While we are actively working with PowerSchool to understand the full scope of this incident, it is important to note that we do not yet know if any NCYAA student data has been accessed or compromised.
On Tuesday, January 7, 2025, PowerSchool informed our leadership team that they experienced a cybersecurity incident involving unauthorized access to certain PowerSchool SIS customer data. The data breach took place between December 17 and December 28, 2024. NCYAA administration is working with PowerSchool to determine if any information was compromised, but they have not confirmed if any information was accessed. PowerSchool has informed the NCYAA administration that they will be reaching out to any individuals affected.
Information that NCYAA has stored in PowerSchool for students enrolled after August 1, 2023 is:
- Student names and ID numbers
- Parent/guardian contact information
- Dates of enrollment and withdrawal
- Limited medical alert information (e.g., allergies, life-threatening conditions)
- Free and reduced lunch status
Please note that NCYAA does not collect or store Social Security Numbers for students or family members.
PowerSchool informed us that, across all of their customers, data primarily includes parent and student name, contact information and address. They also have determined that for a portion of individuals in their districts, some personally identifiable information (PII) and medical information, were impacted. We do not know if our student information was impacted at all, or to that level. PowerSchool is working with urgency to complete their investigation and determine whether NCYAA students’ PII was included.
PowerSchool will provide more information and resources (including credit monitoring or identity protection services if applicable) as it becomes available. You can find more information from PowerSchool here.
Protecting our students’ data privacy is something we take seriously. We will continue to work with PowerSchool to understand the impact of the breach on our student data (if any), and determine what steps we can take to further protect that data in the future.
What You Can Do
While we await more information, we encourage families to take proactive steps to safeguard personal information (steps that are always good practice to protect privacy):
- Monitoring your child’s accounts for unusual activity
- Being cautious of emails or calls requesting personal information
Please reach out to me if you have any questions.
Jeremy Paul
NCYAA Principal of Operations