If you’re a parent in Northeast Florida, don’t treat a school data breach notice like “FYI” paperwork. Treat it like a stopwatch: the sooner you lock things down, the less damage you’re cleaning up later.
On February 5, 2025, Jacksonville Today reported that St. Johns County School District notified families about a PowerSchool cybersecurity incident discovered December 28, 2024, where student data was exported (including names, contact information, and dates of birth). The district said there was no evidence Social Security numbers were compromised, and PowerSchool began offering two years of complimentary identity protection through Experian. (Jacksonville Today)
Below is a practical, no-nonsense triage plan: monitoring vs. fraud alert vs. credit freeze, and how to respond if anything shows up on your credit reports.
What happened (local timeline, in plain English)
- The district reported the PowerSchool incident was discovered on Dec. 28, 2024, and that student information was exported (names, contact info, dates of birth). (St. Johns County School District)
- The district said there was no evidence that Social Security numbers were compromised. (St. Johns County School District)
- The district began notifying impacted parents/guardians on Feb. 4, 2025, and PowerSchool/Experian planned to send enrollment instructions. (St. Johns County School District)
- PowerSchool arranged two years of complimentary identity protection through Experian (and credit monitoring for eligible individuals), and provided an Experian help line: (833) 918-9464. (St. Johns County School District)
- PowerSchool emphasized it will not request personal or account information by phone or email (important, because scams often follow breach publicity). (Jacksonville Today)
Breach notice triage: pick your protection level
Option A: Identity monitoring (helpful, but it’s not “prevention”)
Monitoring can alert you if something happens, and PowerSchool arranged two years of services through Experian for impacted individuals. (St. Johns County School District)
Use monitoring as a seatbelt, not as your brakes. It can help you catch problems, but it doesn’t stop someone from attempting to open new credit in the first place.
Important: scammers love sending fake “enrollment” links after breaches. Use the district/PowerSchool-provided instructions and verify the source. (Jacksonville Today)
Option B: Fraud alert (fast, low hassle)
A fraud alert tells businesses to take extra steps to verify identity before opening new credit. The FTC explains you can place an initial fraud alert by contacting one credit bureau, and that bureau must tell the other two. (Consumer Advice)
Best for: families who want a quick protective step today without managing freezes/unfreezes.
Option C: Credit freeze (strongest prevention)
A security freeze restricts access to the credit file, making it harder for identity thieves to open new accounts. The CFPB explains you can freeze (and unfreeze) your credit for free, but you must contact each nationwide bureau separately. (Consumer Financial Protection Bureau)
Best for: families who want the strongest “stop new credit” tool, especially when a child’s information is involved.
The 30–60 minute action plan (do this this week)
1) Enroll in the offered protection only if you’re sure it’s legitimate
The district states PowerSchool/Experian will send emails with instructions and that Experian is providing a help line at (833) 918-9464. (St. Johns County School District)
If you did not receive an official notice but got a random link, don’t click it.
2) Decide: fraud alert or freeze
- Want the “fast and simple” option? Fraud alert. (Consumer Advice)
- Want the “strongest prevention” option? Freeze (do it at all three bureaus). (Consumer Financial Protection Bureau)
3) Pull credit reports and look for red flags
The FTC says you have permanent free weekly access to credit reports from each of the three nationwide bureaus via AnnualCreditReport.com. (Consumer Advice)
What you’re looking for:
- Accounts you don’t recognize
- Addresses you’ve never used
- Hard inquiries you didn’t authorize
- Collections that don’t belong to you
4) Watch for breach-related scams (because they’re coming)
The district and local reporting emphasized monitoring accounts and being cautious about suspicious activity and communications. (St. Johns County School District)
Rule of thumb: anyone calling “from the school,” “from Experian,” or “from PowerSchool” who asks for sensitive info is a problem until proven otherwise.
If you already see identity theft or credit-report damage
If you spot new accounts, unauthorized inquiries, or collections, act like it’s urgent—because it is.
The FTC explains that IdentityTheft.gov can generate an Identity Theft Report and a personalized recovery plan. (Consumer Advice)
Save your evidence (PDFs/screenshots), document dates, and start the recovery/dispute process immediately. Waiting is how small problems become housing denials, job issues, and higher rates.
Call to action (assertive)
If you received a PowerSchool/St. Johns County breach notice and anything looks off—mysterious inquiries, new accounts, a collection you don’t recognize, or a lender says they “can’t verify” your identity—don’t wait for it to get worse.
Story Law Group helps Northeast Florida families stop the damage and clean up credit reporting problems tied to identity theft and mixed-file reporting.
Call (904) 372-4109 or contact us through our website to request a consult. Have your breach notice and your most recent credit reports handy if possible.
This post is general information, not legal advice.
FAQ
Was my child’s Social Security number exposed?
St. Johns County School District reported that the exported data included names, contact information, and dates of birth, and said there was no evidence Social Security numbers were compromised. (St. Johns County School District)
Even without SSNs, the data can still be used for phishing and identity misuse—so take protective steps anyway.
Should I do a credit freeze or a fraud alert?
A freeze is the strongest prevention against new-account fraud, but you must place it with each bureau. (Consumer Financial Protection Bureau)
A fraud alert is quicker and lower-friction, and you can place it by contacting one bureau (they notify the other two). (Consumer Advice)
Should I freeze my child’s credit?
If you’re concerned about misuse, freezing a child’s credit can be a strong move (process and documentation vary by bureau). Credit freezes are free and can be placed/unplaced as needed. (Consumer Financial Protection Bureau)
I got an email/text about “enrolling” in protection—how do I know it’s real?
Don’t click unexpected links. The district said enrollment instructions would come from PowerSchool/Experian and emphasized scam precautions. (St. Johns County School District)
What if I already see an unfamiliar account or collection on the credit report?
Act immediately. The FTC explains IdentityTheft.gov can create an Identity Theft Report and recovery plan. (Consumer Advice)
The longer false information stays on a report, the more it spreads—and the harder it is to unwind.