PowerSchool Data Breach Class Action Lawsuit

Our data breach attorneys have extraordinary experience and expertise in this area. Gibbs Law Group partner David Berger was appointed co-lead counsel to fight for over 10 million MGM customers whose information was stolen in a data breach in 2020.

PowerSchool operates a Student Information System (SIS) that is used by approximately 75% of K-12 schools in North America. In December, 2024, hackers were able to breach PowerSchool SIS and steal sensitive personal information and personal health information for potentially millions of students and teachers whose school districts currently use or previously used PowerSchool SIS. The hacker allegedly stole the personal data of 62.4 million students and 9.5 million teachers, according to a BleepingComputer report.

This breach exposed “troves of personal data belonging to both current and former students and teachers,” according to TechCrunch, including names, addresses, phone numbers, email addresses, Social Security numbers, dates of birth, some medical and grade information, and other sensitive information.

PowerSchool has since been hit with numerous lawsuits, including our lawsuit filed on January 22, 2025, that accuse the EdTech company of failing to implement sufficient cybersecurity measures.

Gibbs Law Group is seeking compensation for the data breach victims and demanding that PowerSchool fix its apparently ineffective information security systems to protect students’, parents’, and teachers’ sensitive data from future data breaches.

Beginning on January 8, 2025, PowerSchool began notifying customers that they were impacted. PowerSchool has not yet confirmed a list of impacted school districts, but as of January 7, school districts have begun sending out notices to teachers and parents. The notices will likely come from Experian, on behalf of PowerSchool, or from specific school districts. If you have received a notice letter, yours or your child’s information may have been impacted. If you have not received a notice letter, your school district should be able to tell you whether or not your district was impacted.

Gibbs Law Group partner David Berger has represented consumers in some of the largest and most influential privacy and data breach cases in the country and has repeatedly obtained record-setting settlements. Notably, David was appointed co-lead counsel to fight for over 10 million MGM customers whose information was stolen in a data breach in 2020. He frequently speaks at conferences on data breach cases and other class action topics. David is a former Chair of the American Association for Justice’s Consumer Privacy and Data Breach Litigation Group.

Gibbs Law Group is a nationwide leader in class action lawsuits seeking to holding companies accountable for large-scale data breaches.  It has prosecuted some of the largest privacy cases throughout the country, and the firm’s attorneys have received numerous awards for their privacy and data breach work including “Cybersecurity & Privacy MVP,” “Top Cybersecurity and Privacy Attorneys Under 40,” and “Titans of the Plaintiffs Bar.”

The firm achieved a historic $1.5 billion settlement from Equifax in 2019, on behalf of 147 million consumers whose social security numbers and other private data were exposed in a breach.  Described by the court as “the largest and most comprehensive recovery in a data breach in U.S. history by several orders of magnitude,” the settlement also required Equifax to spend over $1 billion in data security technology and to make comprehensive security reforms.  Previously, the firm negotiated a $115 million settlement in the Anthem data breach, the largest data breach settlement at the time, after approximately 80 million personal records were compromised in a massive data breach of health insurance giant.

• Equifax
• Anthem
• MGM
• Comcast
• T-Mobile
• Sequoia Benefits
• US Fertility
• Ascension