Court denies dismissal in PowerSchool breach litigation
Original title: Court denies motions to dismiss in PowerSchool Data Breach Litigation
Judge Battaglia kept CMIA and negligence claims alive in an MDL over data on about 50 million students and educators.
A federal judge in the Southern District of California denied motions to dismiss in the PowerSchool customer security-breach MDL, including challenges to Article III standing. Claims that PowerSchool is a healthcare provider under California’s Confidentiality of Medical Information Act remain, despite a later appellate reversal in a related Illuminate case. The court also refused to dismiss claims against Bain Capital, which plaintiffs allege exercised operational control over cybersecurity decisions. Negligence, unjust enrichment, and California Unfair Competition Law claims may proceed.
Unconfirmed: Counsel says over 50 million people were affected, while Bloomberg reported nearly 50 million.
- The case is MDL No. 3149, In re PowerSchool Holdings and PowerSchool Group.
- Hausfeld said the breach compromised personal data of over 50 million students and educators.
- Bloomberg reported nearly 50 million K-12 students and teachers in a 2024 breach.
- Bain Capital faces agency, direct-liability, and aiding-and-abetting theories.
- The remainder of Bloomberg’s account is paywalled.
- Victims
- PowerSchool
- Organizations
- Bain Capital
- Countries
- United States
From the original article
3 min read at databreaches.netIn previous litigation involving Illuminate (J. M. v.
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.