Richmond

Richmond Alerts

Alert

blue

Axios Richmond Partners

Axios Richmond

Standard

A picture of the Richmond skyline with the letters RIC

A daily look at the most significant and interesting stories affecting Richmond.

Axios Richmond Thought Bubble

Thought Bubble

Richmond Members

Membership

Codebook

Axios Codebook

Per a general 2024 student data privacy agreement listed on PowerSchool's website, the data in the system include "but are not limited to":Data belonging to an unknown number of Hanover County Public Schools students was stolen in a recent breach of a major education technology provider.

Why it matters: Kids aren't immune to identity theft, and an increasing number of them are encountering identity fraud before turning 18, according to recent surveys.

Driving the news: Earlier this month, Hanover schools notified its roughly 17,000 students about a data breach at PowerSchool, an education technology company that works with 75% of all K-12 school districts in the U.S.

The hack happened between Dec. 19-22 and PowerSchool became aware of it on Dec. 28.

The data breached includes student names and addresses, parent contact information, teacher names and schedules.

In a Jan. 14 update, Hanover assured families and staff that Social Security numbers aren't stored in PowerSchool and weren't compromised.

The big picture: About 85 public school districts in Virginia — or roughly 65% — use PowerSchool, according to a list of current members statewide.

Evan Roberts, a crisis and litigation communications consultant on behalf of PowerSchool, told Axios the company can't share how many Virginia schools were involved in the hack due to the ongoing investigation.

Roberts added the "data may vary in volume and sensitivity by school district" but "we expect the majority of involved customers did not have social security numbers or medical information exfiltrated."

Zoom in: Richmond and Chesterfield schools don't use the PowerSchool Student Information System so they weren't affected.

Henrico does, but spokesperson Eileen Cox told Axios that its data "does not currently appear to be impacted" and they remain in contact with the tech company.

Media reports have indicated that at least Charlottesville, Fluvanna, Russell, Botecourt and Salem schools' information was breached.

Per a general 2024 student data privacy agreement listed on PowerSchool's website, the data in the system include "but are not limited to":

Class lists, health records, student discipline files, student course schedules and personally identifiable information — which can be Social Security numbers.

The latest: PowerSchool has said the threat was contained and the stolen data was deleted as it paid money to prevent the hackers from sharing it, per Hanover schools.

That's not a guarantee, and once hackers have stolen someone's data, there are only a few options for people.

For people whose information was involved, PowerSchool is offering two years of free identity protection and credit monitoring services.

What we're watching: It's still unclear how many students' information was at risk in Virginia, and what exact information was hacked statewide.

PowerSchool hack: What to do if your child's data was stolen

School cyber teams go back to the drawing board

PowerSchool hack: How Virginia student data may have been exposed

Hanover schools are so far the only ones in the Richmond area impacted, but it's unclear how many divisions statewide were involved.

Illustration of a backpack with digital glitching.

Per a general <a class="gtmContentClick" data-vars-link-text="2024 student data privacy agreement " data-vars-click-url="https://www.powerschool.com/wp-content/uploads/PowerSchool-Service-Agreements/2024-DPAs/Virginia_PowerSchool_2024_Statewide_DPA.pdf" data-vars-content-id="c4b887d9-c2c4-42c4-98f1-94235927d1c3" data-vars-headline="PowerSchool hack: How Virginia student data may have been exposed" data-vars-event-category="story" data-vars-sub-category="story" data-vars-item="in_content_link" href="https://www.powerschool.com/wp-content/uploads/PowerSchool-Service-Agreements/2024-DPAs/Virginia_PowerSchool_2024_Statewide_DPA.pdf" target="_blank">2024 student data privacy agreement </a>listed on PowerSchool&#x27;s website, the data in the system include &quot;but are not limited to&quot;:Data belonging to an unknown number of Hanover County Public Schools students was stolen in a recent breach of a major education technology provider.Why it matters: Kids aren&#x27;t immune to identity theft, and an increasing number of them are encountering identity fraud before turning 18, according to <a class="gtmContentClick" data-vars-link-text="recent surveys" data-vars-click-url="https://landing.escalent.co/hubfs/24-5014J-CS-2024%20Child%20&amp;%20Family%20Cybersecurity%20Study.pdf" data-vars-content-id="c4b887d9-c2c4-42c4-98f1-94235927d1c3" data-vars-headline="PowerSchool hack: How Virginia student data may have been exposed" data-vars-event-category="story" data-vars-sub-category="story" data-vars-item="in_content_link" href="https://landing.escalent.co/hubfs/24-5014J-CS-2024%20Child%20&amp;%20Family%20Cybersecurity%20Study.pdf" target="_blank">recent surveys</a>.

News

Education

North Korean hackers implicated in major supply chain attack

National

Iranian government's cyber warfare gets personal

Iran-linked group claims hack of FBI Director Kash Patel

Inside Cyber Council, the toughest ticket for  cybersecurity pros

Cybersecurity's new race: Finding the CrowdStrike or Wiz of AI security

topics

politics-policy

epstein-files

donald-trump

2026-midterm-elections

immigration

behind-the-curtain

race-and-equity

technology

privacy-tech-regulation

automation-and-ai

tiktok-news

big-tech

social-media

cybersecurity

economy

social-security

inflation

tariffs

federal-reserve

jobs

transportation

business

stock-market-news

retail-news

crypto

media

elon-musk

dealmaking

health

rfk-jr

drug-prices

axios-explains-abortion

public-health

world

israel

axios-explains-ukraine

iran

russia

china

energy-climate

nuclear-energy

climate-energy-policy

climate-change

extreme-weather

alternative-energy

electric-vehicles

science

emerging-tech

biomedicine

newsletters

charlotte

boulder

detroit

kansas-city

columbus

austin

dallas

atlanta

washington-dc

nw-arkansas

chicago

indianapolis

nashville

richmond

colorado-springs

houston

san-francisco

seattle

boston

des-moines

salt-lake-city

philadelphia

denver

phoenix

new-orleans

miami

twin-cities

raleigh

san-antonio

portland

san-diego

tampa-bay

cleveland

huntsville

pittsburgh

axios-local

axios-pro

axios-live

the-axios-show

Sam Sabin

Featured stories

North Korean hackers implicated in major supply chain attack

Iranian government's cyber warfare gets personal

Iran-linked group claims hack of FBI Director Kash Patel

Inside Cyber Council, the toughest ticket for cybersecurity pros

Cybersecurity's new race: Finding the CrowdStrike or Wiz of AI security