Student Information System · Grades 6–8

PowerSchool

The student information system managing grades, schedules, attendance, and teacher records

Owned by: PowerSchool / Bain CapitalFirm

62M
Students exposed in 2024–25 breach
K–12
Districts using PowerSchool (16,000+)
Bain Capital
Firm owner
2024
Year of breach

PowerSchool is the Student Information System (SIS) used by LMSD to manage student records, grades, attendance, schedules, and teacher communications. It is the spine of the district's data infrastructure. PowerSchool is owned by Bain Capital Firm. In January 2025, PowerSchool disclosed a cybersecurity incident that occurred in December 2024 — attackers accessed the company's customer support portal and exported data on approximately 62 million students and 9 million teachers across North America, making it one of the largest K–12 data breaches in history.

The Full Picture

The Good

  • Industry-standard SIS used by 16,000+ districts — LMSD teachers and administrators are deeply familiar with the interface
  • Provides genuinely useful parent-facing portal (PowerSchool Parent) for real-time grade and attendance visibility
  • Integrates with most major EdTech platforms, reducing duplicate data entry
  • SOC 2 Type II certified data security (before the 2024 breach)
  • Grades K–12 continuity — student record follows the child through their entire school career in one system

The Bad

  • The 2024–25 breach exposed student names, addresses, dates of birth, Social Security Numbers (in some districts), and medical/IEP records — the most sensitive possible student data
  • Bain Capital ownership means a firm controls the infrastructure holding your child's complete academic record
  • PowerSchool initially did not notify affected families directly — districts were left to communicate the breach themselves, creating an information vacuum
  • The PowerSchool breach is not the first — the company has a history of security incidents
  • Platform complexity means most parents only see the grade portal, while vast amounts of additional data (behavioral notes, counselor records, test results) sit in the system invisible to families

The Worse

  • 62 million student records exposed in a single breach — names, addresses, and in some districts, Social Security Numbers of children
  • Bain Capital acquired PowerSchool in 2015 and took it public in 2024 — the SIS is now a publicly traded company (NYSE: PWSC) whose primary fiduciary obligation is to shareholders, not students
  • Because PowerSchool is the SIS, there is no practical opt-out for students — every child in LMSD is in this system
  • PowerSchool paid a ransom to the attackers in the 2024 breach and cannot confirm the stolen data was deleted — it may still be in criminal hands
  • The breach notification timeline was criticized by security researchers as too slow and insufficiently transparent to affected families

Privacy Deep-Dive

Data Held

Student names, addresses, DOB, grades, attendance, schedules, disciplinary records, health/IEP information, teacher communications — the complete student record

2024–25 Breach

Hackers accessed PowerSchool's customer support portal in December 2024, exfiltrating data on ~62M students and ~9M teachers

Breach Response

PowerSchool paid a ransom; engaged CrowdStrike for forensics; notified districts in January 2025; offered 2-year credit monitoring to affected individuals

FERPA

PowerSchool is bound by LMSD's FERPA obligations; district controls who can access student records in the system

Data Retention

PowerSchool retains records per district configuration; typically retained for duration of student enrollment plus mandatory retention periods

NYSE: PWSC

PowerSchool went public in July 2024 — it is now a publicly traded company with quarterly earnings pressure

Breach alert: If your child attended LMSD during the 2024–25 school year, their PowerSchool record was likely included in the December 2024 breach. Contact the district to confirm what specific data was exposed and whether LMSD enrolled your family in the offered credit monitoring.

What It Replaces in the Classroom

Digital grade portal
↓ on a screen
Report card mailed home quarterly; parent-teacher conferences for detailed discussion
Attendance tracking in SIS
↓ on a screen
Attendance recorded in paper grade book, reported weekly to administration
Digital disciplinary record
↓ on a screen
Physical file maintained in the principal's office with strict access controls
Parent portal for grades
↓ on a screen
Teacher-generated progress report sent home biweekly

Questions for the District

Did the December 2024 PowerSchool breach expose LMSD student data, and if so, what specific data fields were compromised?
Did LMSD enroll affected families in credit monitoring, and is that offer still available?
What security audits has LMSD conducted of its PowerSchool configuration since the breach?
Does LMSD store Social Security Numbers in PowerSchool, and if so, is that still necessary?
What is LMSD's plan if PowerSchool suffers another breach or is acquired by a third party?

Sources

Ready-to-Send Templates

Request your child's LMSD data with one email

Get the FERPA Templates →