PowerSchool Student Data Litigation
Coverage from JD Supra, M-A Chronicle, and others
Articles
3
Active Days
26
The Topic

PowerSchool faces parallel legal scrutiny over the security and use of K-12 student data. A federal court allowed multiple claims against owner Bain Capital to proceed in litigation related to a breach reportedly affecting millions of students and educators, while a separate $17.25 million Naviance settlement addresses allegations that third-party analytics tools collected student activity and communications without adequate consent. Together, the matters highlight litigation exposure for education technology providers, owners, schools, and technology partners when sensitive data is accessed, shared, or tracked.
First Article: 04/30/26
Latest Article: 05/25/26
Summary
- A federal court allowed negligence, aiding-and-abetting, unjust-enrichment, and California unfair-competition claims against Bain Capital to proceed in litigation tied to the PowerSchool breach.
- The breach reportedly involved stolen vendor credentials and data from thousands of North American school districts, including sensitive student and educator information.
- A separate Naviance class-action settlement requires PowerSchool and the Chicago school district to pay $17.25 million, subject to final court approval.
- The Naviance lawsuit alleged that Heap analytics captured keystrokes, clicks, mouse movements, and private counselor messages and transmitted data to third parties without adequate consent.
- Heap, Google, Microsoft, and Hotjar agreed under the proposed settlement to delete stored student data.
- The matters raise separate questions about vendor security, third-party tracking, data transparency, and the role of corporate owners in cybersecurity decisions.
History
The biggest update is a more detailed court ruling and a more concrete settlement timeline. The Bain-related litigation now specifies additional claims that survived, while the Naviance case now has a finalized settlement structure with a hearing date and clarified allegations about the type of student data collected.
The biggest change is that the Naviance settlement now includes concrete remedies and parties, while the breach case has advanced further against Bain Capital with specific claims surviving. The story has shifted from general scrutiny to a more developed legal and remedial phase.
