Court allows PowerSchool breach claims to proceed

The article reports that the United States District Court for the Southern District of California recently denied multiple defendants’ motions to dismiss in the multidistrict PowerSchool Holdings, Inc. and PowerSchool Group, LLC Customer Security Breach Litigation, MDL No. 3149. The court allowed key claims to proceed, including challenges to plaintiffs’ Article III standing and certain categories of plaintiffs at the pleading stage.

Hausfeld News notes the decision supports continued liability theories tied to alleged failures in cybersecurity that affected more than 50 million students and educators across the United States. The publication emphasises that private equity owner Bain Capital was also named in the proceedings, with the court allowing claims to move forward based on assertions of operational control over cybersecurity decisions.

Bloomberg’s Christopher Brown is cited describing that PowerSchool did not succeed in dismissing a claim that it failed to protect personal information in the 2024 breach. The judge’s ruling, as Brown states, indicates that plaintiffs adequately pleaded PowerSchool as a “provider of health care” under the California Confidentiality of Medical Information Act, a characterization central to the dispute.

The article clarifies that PowerSchool provides software and data-management services to school districts both in the United States and abroad, and that the ruling preserves several causes of action including negligence, unjust enrichment, and California Unfair Competition Law under agency, direct liability, and aiding-and-abetting theories. The report attributes the core developments to the judge identified as Anthony J. Battaglia and to Bloomberg Law’s coverage, noting that the rest of the Bloomberg paywalled material is not publicly available in full.