The attacker behind the data breach impacting several school boards across the Greater Toronto Area and abroad may have gotten access to staff and students' personal and sensitive information, PowerSchool says.