The breach “was traced to a compromised credential granting access to certain customer data in the PowerSchool-managed student information system,” Sibley said.