The PowerSchool IPC report: Five tips for school boards and Ontario institutions
On November 17, 2025, the Ontario Information and Privacy Commissioner (IPC) released a complaint report arising from the December 2024 cyberattack against the PowerSchool Student Information System (SIS). The report is the IPC’s most current guidance on the obligations of Ontario public sector institutions that outsource systems for processing personal information. The findings Twenty public school boards reported the PowerSchool incident to the IPC. A threat actor used compromised credentials…

