Avoiding Ransom Payments: Lessons from Powerschool Breach

These are cybercriminals we are dealing, the lowest of the low. Do you really their ‘word’ matters when they say they will release your data to you? Or, not release the data they stole from you online in to the dark web? Not a chance!

Citynews.ca reports that Powerschool, a company that makes a database management system used for tracking student information, was ransomwared in 2024. Powerschool paid the ransom and were promised that the information stolen was destroyed after they paid the ransom.

The Toronto District School Board today, announced that the data believed to have been destroyed was not in fact, destroyed and the data is now being used to ransomware the school boards whose data was stored in the Powerschool breach in 2024. This affects the Toronto District School Board as well as several other school boards in North America.

Full article here and the press release from the TDSB here.