ALSDE: System used to store student data breached

Published 11:00 am Saturday, January 11, 2025

Getting your Trinity Audio player ready...

School systems throughout Alabama are among those that may have been affected by a cybersecurity breach of a system used to collect certain student information.

Alabama State Department of Education Communications Director Dr. Michael Sibley reported on Wednesday that the agency’s student information system vendor, PowerSchool, reported a cybersecurity incident involving unauthorized access to its community support portal. He said the breach on PowerSchool was international and not a directed at the ALSDE or any specific Alabama school system.

Andalusia Superintendent Dr. Daniel Shakespeare said in a statement the breach occurred on Dec. 28 and that the ALSDE has contained the breach.

“There is no evidence of ongoing unauthorized activity or operational disruptions,” Shakespeare said.

Sensitive personal student data that may have been involved in the breach include names, addresses, and email addresses. Social security numbers could not have been involved in the attack, according to Sibley. He said some medical and grade information may have been impacted.

In an email to parents, PowerSchool said it became aware of the incident on Dec. 28. The company will offer credit monitoring and identity protection services to those who sensitive data was compromised.

PowerSchool is a California-based company used by every school system in the state for virtual notifications and grade system.

“PowerSchool has implemented enhanced security measures, deactivated the compromised credentials. Andalusia City Schools is working closely with PowerSchool to communicate with families, educators, and stakeholders. Andalusia City Schools will provide more information as it becomes available,” Shakespeare said.

Covington County Superintendent Shannon Driver and Opp Superintendent Emily Edgar said they are waiting for more information from the ALSDE prior to speaking on the matter.