PowerSchool Data Breach
A compromised credential without MFA enabled allowed a hacker to access PowerSchool's systems for nine days, exfiltrating personal data of 62 million students and 9.5 million educators in the largest breach of children's data in U.S. history.