News release PowerSchool commits to strengthened breach measures following engagement with the Privacy Commissioner of Canada Office of the Privacy Commissioner of Canada

pJuly 22 2025 Gatineau QuebecppPowerSchool has committed to take steps to ensure that the education technology software companys security measures are appropriately strengthened following a cyberattack that impacted millions of Canadian students parents and educatorsppThe commitments follow an engagement with the Office of the Privacy Commissioner of Canada to ensure that PowerSchool was taking appropriate steps to respond to the breachppAs part of this breach a hacker obtained data such as names contact information dates of birth and in some cases medical information and Social Insurance Numbers of current and former students current and former educators and parents across several provinces and territoriesppPowerSchool took measures to contain the breach notify affected individuals and organizations and offer credit protection and has voluntarily committed to additional actions to support its security safeguards These include strengthened monitoring and detection toolsppIn light of the actions that PowerSchool has already implemented and those that it will implement over the coming months Privacy Commissioner of Canada Philippe Dufresne has decided to discontinue the investigation that he launched in February but will be monitoring to ensure that all of PowerSchools commitments are fully metppThis decision does not affect ongoing investigations by provincial Information and Privacy Commissioners in Ontario and Alberta who are actively examining the breach from the perspective of the school boards and schools under their respective privacy lawsppI welcome PowerSchools willingness to engage with my Office to achieve a timely resolution that will result in stronger protections for the personal information of students parents and educators across Canada Federal privacy law requires that organizations protect personal information with security safeguards appropriate to the sensitivity of the information This is particularly important when dealing with childrens personal informationppPhilippe DufresnePrivacy Commissioner of CanadappOffice of the Privacy Commissioner of CanadacommunicationsprivgccappThe Privacy Commissioner of Canada is an Agent of Parliament whose mission is to protect and promote privacy rightsppGet updates about the OPCs announcements and activities as well as the events in which we participateppWe respect your privacyppRead our Privacy policy and Terms and conditions of use to find out more about your privacy and rights when using the privgcca website or contacting the Office of the Privacy Commissioner of CanadappIf you have a question concerns about your privacy or want to file a complaint against an organization we are here to helpp