PowerSchool confirmed the breach potentially exposed sensitive information such as Social Security numbers and medical data.