Key Takeaways:

• Ed tech company PowerSchool’s recent breach exposed the data of approximately 60 million students and 10 million educators.
• Hacker gained access via a compromised employee password and remained undetected for nine days.
• Sensitive personal data, including Social Security numbers and medical histories, was potentially compromised, raising a number of legal and regulatory concerns.
• The breach underscores the urgent need for stronger third-party oversight and security requirements.