PowerSchool said in a brief update on Monday that it had started the process of filing legally required regulatory notifications following the breach, which saw attackers use a stolen account credential to access the company's customer support portal to exfiltrate huge quantities of sensitive student and teacher data. PowerSchool previously told TechCrunch that the hacked account was not protected with multi-factor authentication.