Shelley School District

PowerSchool Security Incident

Important Notice: PowerSchool Cybersecurity Incident

What Information Was Affected?

While the investigation is ongoing, the data involved may include:

Names, addresses, and contact information for current and past students and staff.
Health and safety records, grade information, and other educational data for current and past students.
Parent/guardian and emergency contact information.

Importantly, social security numbers were not part of the data involved in this breach, as the district does not store social security numbers in the affected systems.

Support for Affected Individuals
PowerSchool is taking responsibility for assisting those impacted and is providing the following:

Two years of complimentary identity protection services for all students and educators whose information was involved.
Two years of complimentary credit monitoring services for adult students and educators.
Direct notifications to affected individuals (or their parents/guardians if under 18) with information on how to enroll in these services.

PowerSchool is also coordinating with Experian to provide identity protection services and operating a call center to assist the community.

What’s Next?
PowerSchool will notify impacted individuals directly with instructions on accessing the complimentary services. These notifications will include details on how to activate the identity protection and credit monitoring services provided.

In the meantime, we encourage families and staff to:

Monitor your accounts and credit reports for unusual activity.
Be cautious of unsolicited communications asking for personal information.
Visit the Federal Trade Commission’s Identity Theft Resources for more tips on safeguarding your information.

Learn More
For more details about the incident and PowerSchool’s response, visit their dedicated page: PowerSchool Cybersecurity Incident.

Shelley School District remains committed to protecting our community’s information and providing updates as more information becomes available. If you have any questions, please contact us at bjenson@shelleyschools.org or 208-357-5750.

Thank you for your understanding and cooperation as we work through this matter.

PowerSchool has posted its Notice of Data Breach For Individuals in the United States to share some important information regarding the recent cybersecurity incident involving personal information belonging to current or former students and teachers of schools and districts like Shelley School District that use or used software called PowerSchool Student Information System (SIS). Notice of Data Breach For Individuals in the United States. The PowerSchool Notice contains important instructions regarding enrolling in two year of complimentary identity protection services through Experian.
PowerSchool:

In the coming days, PowerSchool will begin providing formal legal notice of the cybersecurity incident to current and former students (or their parents / guardians as applicable) and educators whose information was determined to be involved.

A direct email notification will be distributed by Experian on behalf of PowerSchool in the coming weeks to applicable current and former students (or their parents / guardians as applicable) and educators for whom we have sufficient contact information. PowerSchool will also launch a website and distribute a media release to ensure we reach as many involved individuals as possible and provide them with resources to protect their information. Importantly, these notices will include instructions for involved individuals on how to enroll in the credit monitoring and identity protection services that are being offered by PowerSchool.
Shelley School District is committed to transparency and the safety of our students, staff, and community. We are providing an update regarding the recent PowerSchool cybersecurity incident that has impacted school districts nationwide.

On January 16, 2025, PowerSchool informed Shelley School District that our systems were affected by a data breach that occurred between December 19, 2024, and December 23, 2024. This incident involved unauthorized access to PowerSchool’s support platform, PowerSource, which allowed threat actors to extract data from PowerSchool Student Information System databases.