05/16/2026
275 million students.
9,000 schools.
One breach.
We continue to receive questions about the recent Canvas cybersecurity breach affecting schools and universities across the country, so we wanted to put together a simple guide for students, parents, educators, and administrators.
Canvas, the learning management platform used by thousands of schools and colleges, confirmed a major cybersecurity incident tied to the ShinyHunters extortion group. Reports indicate that names, email addresses, student ID numbers, and private messages may have been exposed.
While incidents like this are alarming, awareness and preparation can go a long way in helping protect families and organizations.
If your child’s school uses Canvas, here are several important steps to take now:
1. Watch for phishing emails
- Be cautious of emails claiming to be from Canvas, schools, or IT departments
- Avoid clicking unexpected links or attachments
2. Change passwords
- Update Canvas passwords immediately
- Change any other accounts using the same password
- Enable multi-factor authentication when available
3. Monitor student accounts
- Watch for suspicious password reset emails or login activity
- Pay attention to unusual messages or requests
4. Talk to students about online safety
- Encourage them to verify messages before clicking links
- Remind them that cybercriminals often impersonate trusted people
5. Contact your school if you have concerns
Ask:
- What information may have been exposed?
- What protective measures are being offered?
- What additional guidance should families follow?
This is also an important reminder that cybersecurity impacts every organization, not just schools. Businesses, nonprofits, healthcare providers, and local governments all rely heavily on cloud platforms and third-party systems every day.
Feel free to share this with parents, students, educators, administrators, and business leaders who may benefit from it.
Stay safe!
