PrivacySignal
Analysis ← Front page
Breach

Court denies motions to dismiss in PowerSchool Data Breach Litigation

DataBreaches.net · · International · Data Breaches

A federal court has refused to dismiss litigation against PowerSchool stemming from a data breach, allowing claims that the education technology company qualifies as a healthcare provider under California's medical information privacy law to move forward.

Why this matters: PowerSchool holds data on tens of millions of students, including health and disability records schools are required to collect. Courts are now treating ed-tech companies as healthcare providers under California law, which carries much stricter liability. That matters because it closes a loophole companies have used to argue they are just software vendors, not responsible parties. If that legal theory holds, the companies building the pipes that carry sensitive student data cannot dodge accountability by pointing at the schools.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement
Read the original at DataBreaches.net → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Breach
CyberScoop · · US Federal

Researchers uncover Volt Typhoon’s covert, ephemeral network

The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks. The post Researchers uncover Volt Typhoon’s covert, ephemeral network appeared first on CyberScoop.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach Critical
BleepingComputer · · International

Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
DataBreaches.net · · International

JPN: Times Car reporting ¥5.5 billion loss has firms bracing for data breach fallout

Times Car, a Japanese car-sharing company, is reporting a ¥5.5 billion loss following a September data breach that exposed personal information — including driver's license data — of 1.46 million customers. The incident is prompting broader concern among Japanese companies about the financial consequences of weak cybersecurity practices.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

#breach#privacy Read original →
Breach
BleepingComputer · · International

Even after PHP2Shell, blast radius matters more than a CVSS score

PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the damage from a breach. [...]

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai#security Read original →
Breach
DataBreaches.net · · International

KR: Bithumb discloses data leak after internal system breach; One of three financial firm breaches reported that day

CoinTelegraph reports: South Korea’s crypto exchange Bithumb is investigating the extent of a data leak caused by a hack of its internal mobile system earlier this week, Yonhap News Agency reported Wednesday. Bithumb discovered the breach of its in-house mobile system — the platform used by employees to communicate internally — on Tuesday and notified...

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
DataBreaches.net · · International

Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat

Sead Fadilpašić reports: Japanese internet giant GMO Group has told its customers to scan their computers for viruses, back up all of their data, disconnect the devices from the internet and then shut them down. The announcement, which literally told customers, “unplug any cords connected to your PC,” was made in response to a cyberattack...

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →