Important NEW Information on PowerSchool Data Breach
On May 7, 2025, PowerSchool notified customers that a threat actor had contacted PowerSchool SIS customers in an attempt to extort them.
What should I do if the cybercriminal involved in the breach contact me?
- If you have been affected by the breach and you are asked for ransom do not engage or respond to these requests from the cybercriminal.
- If you receive this type of email, you are encouraged to send it to the Government of Canada Cyber Centre https://www.cyber.gc.ca/en/guidance/ransomeware. Do this by attaching the cybercriminals email as an attachment instead of just forwarding it. You can also notify your Education Body, if you receive this type of email.
- If you have not already done so, register for credit and identity protection services offered by PowerSchool. Deadline to register is May 30, 2025.
The Government of Canada strongly discourages paying ransom, as it supports the ransom business model and increases the risk and likelihood of this continuing.
The GNWT will continue to share PowerSchool’s updates and providing guidance on cybersecurity best practices. Updates will be published at: https://www.ece.gov.nt.ca/en/services/powerschool-cybersecurity-incident
PowerSchool is the Student Information System used in the NWT’s Junior Kindergarten to Grade 12 schools. Jurisdictions, including the NWT, use reputable companies for this information management and conduct privacy impact assessments.
Remain vigilant against incidents of identity theft and fraud by reviewing account statements for suspicious activity. PowerSchool will never contact you by phone or email to request your personal or account information.
