The Rochester City School District says a data breach exposed more than 130,000 student and staff records.
According to the RCSD, those records include names, ages, addresses, phone numbers, medical information and conditions.
The district says the "incident involved unauthorized access to information through a compromised credential on one of PowerSchool’s customer support portals." PowerSchool is a third-party student management system used by the district. The breach impacted thousands of districts across the U.S. and Canada.
A statement released by the RCSD says PowerSchool is working with law enforcement and cybersecurity experts to investigate the situation. PowerSchool leadership says there were no additional actions RCSD could have taken to prevent the breach.
In the coming weeks, PowerSchool says it, in collaboration with Experian, will notify students (and parents or guardians if the student is under 18) and staff whose information was involved. They will be given a phone number to answer any questions they may have. They will also receive identity protection and credit monitoring services where applicable.
The full statement from the RCSD can be found here. Updates from PowerSchool can be found here.