When you discover that a business you’ve never heard of has been secretly keeping some of the most private information about your kids for years, a certain kind of uneasiness sets in. For many parents, PowerSchool is that company. With its headquarters located in an unremarkable office park in Folsom, California, the company was founded in 1997 and has since grown to become the leading platform for K–12 school administration in North America. It handles student records, attendance, grades, enrollment, staff payroll, and increasingly, AI-assisted learning tools. It serves more than 60 million students in 90 countries, according to its own count. Six months ago, the majority of those students’ parents couldn’t have told you the name of the company.
When the breach became public, that was no longer the case. PowerSchool acknowledged earlier this year that data on students and teachers from school districts in the US and Canada had been accessed by an unauthorized party through its customer support portal.
Names, addresses, Social Security numbers, medical information, and, in some cases, historical records dating back years were all too much to handle. The incident raised issues that go far beyond a single security flaw for a platform that had positioned itself as the backbone of contemporary education. The total number of people impacted is still unknown, and some districts claim they are still figuring out what was taken.
PowerSchool’s position is especially intriguing and complex because of how deeply ingrained it is. After a poor quarter, schools cannot simply replace this software. Enrollment, grade books, special education records, HR systems, and increasingly AI-powered tools like PowerBuddy, which facilitates student interaction with classroom content, are all managed by the platform. According to an Oklahoma special education teacher, it can be used on demand to assist students in simplifying challenging content.
The benefits of integrating AI directly into the learning management system that students already use on a daily basis were discussed by a Spanish teacher in Colorado Springs. These use cases are not incidental. They are day-to-day operations, and switching platforms in the middle of the year would be more akin to rebuilding a hospital than altering a phone app.
That is the tension at the core of PowerSchool’s current situation. Under CEO Antonio Pietri, who assumed the position in late 2025, the company is moving forward with an ambitious integrated vision: a “Connected Operating System” for K–12 education that becomes more capable the more products a district utilizes. The pitch makes sense. Theoretically, districts can act on data more quickly and accurately when their talent management software, learning platform, intervention tools, and student information system communicate with one another. In areas where it is effective, this integration might actually improve results. Real operational gains are described by a number of district leaders cited on the company’s website.
Observing all of this gives me the impression that edtech is about to face some sort of reckoning. Platforms like PowerSchool are targets due to the same consolidation that makes them effective, and the repercussions of failure are exceptionally wide. People switch credit cards when a retailer is compromised. When a school platform is compromised, the exposed data is frequently unchangeable.
PowerSchool claims to have informed impacted customers and implemented corrective measures. Numerous jurisdictions have seen the filing of class action lawsuits. A few districts have made their receipt of ransom demands public. To be honest, the company’s public communications have been cautious in ways that don’t always address the questions that the majority of parents are genuinely asking, and it’s still unclear whether all the data involved has been contained or destroyed.
Education leaders’ current priorities and thoughts are surveyed in PowerSchool’s 2026 Edtech Pulse Report. It’s unclear if security has risen higher on that list this year than it did prior to December. Most likely, it ought to have existed all along.
