As reported by BleepingComputer, the personal data of 62.4 million students and 9.5 million teachers was exposed during the attack when the threat actor used stolen credentials to access the PowerSchool customer support portal. After which, they used a maintenance access tool to download the data from districts’ PowerSIS databases.

The hack has the potential to be one of the biggest of the year, but the edtech giant is refusing to answer important questions

The hack of a K-12 software provider has left student and teacher information exposed in districts around the country. The breach has left many North Carolina students, teachers and families worried about the potential impact on their privacy.

PowerSchool, a software provider popular at K-12 schools, was the target of a data breach in late December that affected many districts in the U.S. and in other countries, according to the company and several impacted schools .

A new report from Bleeping Computer suggests the hacker infiltrated the entire PowerSchool userbase, but PowerSchool declined to confirm or deny the numbers to PCMag.

Besides providing software for administration, grades, and other functions, PowerSchool stores personal data for students and teachers, with much of that data including Social Security numbers, medical information,