LEWIS CENTER, Ohio (WCMH) — A class action lawsuit was filed on behalf of an Olentangy Liberty High School student against PowerSchool just weeks after multiple central Ohio school districts were part of a data breach.
Millions of students and teachers had their personal information stolen in the breach, including the 18-year-old student who filed the suit. Attorney Mark Troutman’s firm Gibbs Law Group filed the suit against PowerSchool on the student’s behalf. Troutman said hackers access private information from over 62 million students, including dates of birth, home addresses and medical records.
“Data companies make tons of money holding your information. The fact that people’s information is out is worth something alone, let alone the fact that we’re dealing with children here,” Troutman said.
The complaint alleges the hackers could sell students’ information to the dark web and it could be used to open bank accounts and take out loans in students’ names. Children are especially vulnerable, Troutman said.
“Children don’t typically have credit reports,” said Troutman. “Credit monitoring doesn’t work as well with children and parents aren’t typically checking to see whether children’s credit is being affected.”
Troutman said the data breach shows that PowerSchool’s cyber security was not up to industry standards.
“One of the most common things that we all experience in our lives with our credit cards, bank accounts is two-factor authentication. We have reason to believe that many of the aspects and many of the systems within PowerSchool didn’t use two-factor authentication,” said Troutman.
Although initial reports from PowerSchool said they had reason to believe the data was deleted, recent reports imply student information may already be out there. Troutman said parents should get a credit report for their child and make sure it is blank. If there is something you can’t identify, that’s a big red flag.
In response to the lawsuit, PowerSchool sent NBC4 a statement that read in part, “PowerSchool is focused on working through this matter directly with our customers. We care deeply about the students, teachers and families we serve and are wholeheartedly committed to supporting them.”
Troutman said he is hoping to get compensation for all of the people affected by the data breach.