Oswego USD 504

January 29, 2025

Dear USD 504 Nation:

As you may be aware, PowerSchool – a cloud-based software vendor used by USD 504 – recently experienced a cybersecurity incident involving unauthorized access to certain information within the PowerSchool Student Information System (“SIS”). PowerSchool has informed us that on December 28, 2024, they became aware that personal information of students and educators from the SIS was exported through one of their support portals, PowerSource.

Upon learning of the incident from PowerSchool on January 7, 2025, USD 504 acted swiftly to investigate its impact on our students and teaching staff. We also engaged legal counsel to help us assess the situation and take the necessary steps to protect our community.

PowerSchool has said that they will be providing additional information regarding this incident and begin notifying affected individuals in the coming weeks. We will continue working with our legal counsel and will continue to keep you informed as we receive additional updates from PowerSchool. 

At this time, PowerSchool has not shared with us which specific students, educators, or other individuals affiliated with USD 504 have been impacted.  

Meanwhile, PowerSchool has shared the limited following information to date:

• For students and educators, the types of information compromised might include:  individual’s name, contact information, limited medical alert information, and/or Social Security Number (non-exhaustive list of data elements);

• PowerSchool intends to publish notice of this incident on their website;

• PowerSchool intends to notify media outlets of this incident;

• PowerSchool intends to send notice of this incident to affected individuals via email (if available);

• PowerSchool intends to provide two (2) years of complimentary identity protection services to affected individuals;

PowerSchool intends to notify certain State Regulators (including State Attorneys General – but not State or Federal Departments of Education). In the meantime, we encourage you to visit https://www.powerschool.com/security/sis-incident/ for information on the cybersecurity incident.

Nothing is more important to us than the safety and security of our students, parents, and educators. We remain fully committed to ensuring our school continues to provide the highest quality education.

Thank you for your shared commitment to putting our students first.

Sincerely,