Hacker accessed PowerSchool’s network months before massive December breach

A hacker compromised with the US AdTEC Giant PowerScol a few months before his “huge” data violation in December, according to A now published forensic report In the events conducted by the US Cybercquire firm Croudstrike.

In a letter sent to the affected customers seen by TechCrunch last week, PowerSscul confirmed that its network “Experienced unauthorized activities before December”, which was at least 2024’s date of August 2024.

PowerScus earlier said that it detected unauthorized access to its system by December 5 until it discovered the compromise on December 28, 2021.

Croudstrike said in his report that a hacker used the same compromise support certificates used in December violations to access the PowerScul network between August 16, 2024, and September 17, 2024. Certificate was used for PowerScouple PowerSource Access, the same customer support portal to provide information at the Insect to Polish school.

According to Croudstrike, PowerSource “For the purpose of maintenance, the customer allows a support technician to get access to SIS database examples”.

Croudstrike said that “It was not found in December 2021 that the threats responsible for this activity did not find sufficient evidence to blame the actor, because the log data of PowerScul” did not return enough. ” However, Croudstrike’s searches indicate that if the compromised certificates were changed soon, the December violation of PowerScul would be prevented.

When asked by TechCrunch on Monday, PowerScul’s spokesman Beth Kebella refused to say whether the company was aware of the previous access to its network before the report was released.

There have been many questions about the PowerScol ViolationThe total number of such affected persons. PowerScus has repeatedly refused to supply a correct figure, though Report Suggest that more than 60 million students were accessed in personal information.