The Reality: For the first 90 days of Bain Capital’s ownership of Powerschool—the exact window of the transition—a hacker sat inside the network.
The account he used to steal the data of millions of teachers and children was not secured with Multi-Factor Authentication (MFA).