Greenwood

The issue has been identified and a fix is being implemented.

ConnectWise is investigating recent attempts of unauthorized access associated with the ConnectWise Cloud Backup environment. Upon detecting this threat, we promptly initiated our incident response procedures. Containment measures are in place, and our investigation continues. At this time, there is no indication that partner backup data has been accessed. Our engineering teams are continuing to explore the nature and scope of the issue. Our investigation is ongoing, and we will provide additional information as appropriate. We appreciate your patience while we work through this process. Indicators of Compromise (IOCs) The following indicators have been associated with the reported suspicious authentication activity . Source IP Address 144.172.64.128 Observed User Agents Python-urllib/3.12 python-requests/2.31 These indicators are provided transparency to assist with security monitoring and investigation. Their presence alone does not establish unauthorized activity or confirm compromise.

Professional Learning and Perform Enterprise have now been patched, joining SchoolSpring, SchoolMessenger Communicate, Schoology, and PowerSource. Remediation remains underway for Behavior Support, Naviance and NeverSkip. PowerSchool continues to prioritize patching for these remaining affected products.

We have developed a fix that is currently undergoing QA testing. We are targeting deployment on 26 October 2026 and will provide an update if this date changes.

Twilio customers may be experiencing voice call post dial delay from Twilio Phone Numbers to network subscribers in Chile. Our team is actively investigating this issue. We will provide another update in 1 hour or as soon as more information becomes available.