Get the latest tech news

Malware stole internal PowerSchool passwords from engineer’s hacked computer

The theft of a PowerSchool engineer's passwords prior to the breach raises further doubts about the company's security practices.

TechCrunch learned this week of a separate security incident, involving a PowerSchool software engineer, whose computer was infected with malware that stole their company credentials prior to the cyberattack. The malware logs contain the engineer’s passwords for PowerSchool’s source code repositories, its Slack messaging platform, its Jira instance for bug and issue tracking, and other internal systems. As we have noted before about breaches in similar circumstances, it is ultimately the responsibility of companies to implement defenses and enforce security policies that prevent intrusions caused by the theft of employee credentials.

Get the Android app