Ontario commissioner releases investigation findings into PowerSchool breach affecting school boards
The Information and Privacy Commissioner of Ontario (IPC) has released its final report on the cyber incident involving PowerSchool, our student information system, which impacted many boards across North America including the Brant Haldimand Norfolk Catholic District School Board (BHNCDSB).
We have reviewed the IPC’s findings and recommendations and will continue to integrate them into our ongoing work to strengthen privacy and security measures across the board. We understand the importance of strong oversight of third-party technology providers and remain committed to working closely with our partners to meet high standards of security.
The BHNCDSB has already implemented many of the recommendations found in the report and appreciates that the IPC acknowledged the steps we took to notify those affected by the cyber incident. Since then, PowerSchool has added additional security measures, and BHNCDSB will continue to work with them to ensure these improvements are upheld.
We also support the Commissioner’s call for increased collaboration among Ontario school boards to help strengthen the security practices of shared vendors. BHNCDSB looks forward to contributing to this collective effort to protect students, families, and staff.
To review the IPC’s media release and full report, visit Ontario and Alberta privacy commissioners release investigation findings into PowerSchool breach affecting school boards and other educational bodies | Information and Privacy Commissioner of Ontario




