Cybersecurity breach hits Canvas learning platform used by CMS, other Charlotte-area school districts
Key Points:
- Several school districts in North Carolina and South Carolina, including Charlotte-Mecklenburg and Cabarrus County, are investigating a nationwide cybersecurity breach involving Instructure, the company behind the Canvas learning management system.
- Instructure resolved the issue, confirming Canvas remains operational, and reported that only basic directory information like names and student IDs may have been accessed, with no evidence of passwords, financial data, or government identifiers being compromised.
- Affected districts have taken immediate actions such as auditing access permissions, coordinating with state officials, and engaging forensic specialists to prevent future incidents.
- Some South Carolina districts, including York County District 1 and Rock Hill Schools, are still assessing the breach's impact, while others like Fort Mill Schools confirmed they were not affected due to not using Canvas.
- Families are advised to be vigilant against suspicious emails or messages and report concerns to their schools, with districts promising to provide updates as investigations continue.