A new report from Bleeping Computer suggests the hacker infiltrated the entire PowerSchool userbase, but PowerSchool declined to confirm or deny the numbers to PCMag.

Professor noted the need for continued pushes for multi-factor authentication for educational services that require such extensive identifying information.

Bleeping Computer on Wednesday also reported that an extortion note the attacker sent to PowerSchool claimed that the personal data of 62.4 million students and 9.5 million teachers was swept up in the breach. PowerSchool said it’s offering two years of free credit monitoring to all those affected.

The hack has the potential to be one of the biggest of the year, but the edtech giant is refusing to answer important questions

PowerSchool, a widely used platform among districts in western Washington, including Seattle and Everett, confirmed the breach.

Over 60 million students & teachers data may have been stolen in PowerSchool breach