The Massapequa School District confirms it was affected by a data breach involving an online portal that contains student information.
PowerSchool is a program used by students, parents and districts for grades, attendance and other information. The company confirmed to News 12 that it became aware of a potential cybersecurity incident on Dec. 28.
A spokesperson for PowerSchool says personal data, like Social Security numbers and medical information may have been stolen. The company says it is working to identify whose data may have been affected.
The full statement from the spokesperson says, “On December 28, 2024, we became aware of a potential cybersecurity incident involving unauthorized access to certain PowerSchool SIS information through one of our community-focused customer portals, PowerSource. As soon as we learned of the incident, we immediately engaged our cybersecurity response protocols and mobilized a cross-functional response team, including senior leadership and third-party cybersecurity experts.
PowerSchool is not experiencing, nor does it expect to experience, any operational disruption and continues to provide services as normal to our customers. We have no evidence that other PowerSchool products were affected as a result of this incident.
We take our responsibility to protect student, family, and educator data privacy extremely seriously, and we are committed to helping affected customers, families, and educators with resources and support as we work through this together.”
In a letter to parents and guardians, the Massapequa School District said, "We were recently notified by our student information system provider, PowerSchool, that they became aware of a cybersecurity breach involving unauthorized access to certain student information through one of their community-focused customer support portals, PowerSource. PowerSchool has shared that this breach has impacted a significant number of school districts, including the Massapequa School District.
The PowerSchool notification stated, “As soon as we learned of the potential incident, we immediately engaged our cybersecurity response protocols and mobilized a cross-functional response team, including senior leadership and third-party cybersecurity experts. We have also informed law enforcement.” They continued to share, “PowerSchool is committed to working diligently with customers to communicate with your educators, families, and other stakeholders. We are equipped to conduct a thorough notification process to all impacted individuals. Over the coming weeks, we ask for your patience and collaboration as we work through the details of this notification process.”
We will provide updates as we learn more about this incident."
The online program is used by multiple other Long Island schools, but no other districts have confirmed that they were affected as of Friday.