The North Carolina Attorney General's office will investigate the data breach blamed for exposing personal information of teachers, students and parents in public school across the state and nationwide.
PowerSchool, a communication program that has been used by public schools and families in all 100 North Carolina counties, holds information on grades, disciplinary actions, test scores, contact information, busing information, attendance, demographic information and many other datapoints for more than 1.5 million North Carolina students.
Other WRAL Top Stories
>> PowerSchool breach FAQ: What to know about the data breach affecting NC schools
“I’m a parent who uses PowerSchool, so I know what millions of North Carolina families are concerned about with this data breach," Attorney General Jeff Jackson said in a news release announcing the investigation. "I’m investigating PowerSchool to determine if they broke any laws in this process, and I’ll take additional legal action if necessary."
The company notified the North Carolina Department of Public Instruction that its system was breached on Dec. 28. NCDPI says Social Security numbers for more than 300,000 teachers and 910 students were in the data that was exposed.
Last Friday, the Wake County Public School System sent a message to families and staff telling them to look out for a message letting them know if they were among that number. But officials have said no Wake students had their Social Security numbers exposed.
PowerSchool is offering two years of credit monitoring for free to anyone whose data was accessed.
People won't necessarily be notified by their schools or school systems, if they were affected. PowerSchool has sent out information on the credit monitoring provided Experian, and an email from Experian would further explain what data was accessed, tailored to the individual.
The North Carolina Department of Public Instruction does know which data fields were accessed and how many records were contained under each field, Vanessa Wrenn, the department's chief technology officer, told the State Board of Education on Thursday.
But the department hasn't provided numbers or a list of fields in response to requests from WRAL News.
The department has said all schools that have used PowerSchool at any point since 2013 were affected, and that about 312,000 current and former teacher Social Security numbers were accessed and 910 student Social Security numbers were accessed.
Wrenn said Thursday that the student Social Security numbers were accessed from students at just four schools.
All current Wake teachers and students had some data accessed, Wake County Public School System spokeswoman Lisa Luten told WRAL News. Some former teachers and students were affected, too, but Luten didn't have numbers on how many people were affected. She said many of the numbers the district has gotten from PowerSchool were duplicates because people may have been found twice in the datasets that hackers accessed.