CISA Unveils New Cybersecurity Resources for K-12 Schools and Districts
The Cybersecurity and Infrastructure Security Agency (CISA) released new resources for K-12 schools this week. Their press announcement: Source: CISA
Canvas Pauses Data Delivery Due to Potential ‘Security Threat’ at Vendor
Inside Higher Ed reports that recovery from the Canvas data breach encountered a glitch: In the aftermath, Instructure CEO Steve Daly vowed to be “transparent about what happened” and provide K–12 schools and higher education institutions “with information as quickly as we responsibly could.” Over the past two months, Instructure has worked “to conduct a detailed forensic […]
ShinyHunters claims breach of Oracle PeopleSoft servers at 100-plus organizations
TechCrunch reports that ShinyHunters has claimed responsibility for hacking Oracle PeopleSoft servers at more than 100 organizations, many of them universities. The breaches, first reported by BleepingComputer involved: “Student, applicant, financial aid, immigration, health, and administrative data has been exfiltrated,” read a message that the hacker said was sent to one of the victims. The hackers claimed […]
Edtech giant Instructure waves white flag, makes deal with ShinyHunters to resolve incident
When education software giant Instructure announced on May 1 that its widely used Canvas software was unavailable as it investigated a data security incident, it suggested the breach was mostly contained. That turned out to be overly optimistic. While the firm posted updates on its site as its services returned to service, the ShinyHunters group that attacked them continued to […]
Canvas restored after cyberattack disrupted access for schools
There has been yet another development in the hack-and-leak attack on edtech giant Instructure, which was targeted by the ShinyHunters gang in April. When Instructure didn’t pay the gang’s ransom demands to delete the data, ShinyHunters attacked them again, defacing Canvas login pages with a note from ShinyHunters to schools. CNN reports: An apparent cyberattack shut down an […]
Edtech Firm Instructure Updates Data Breach Status While ShinyHunters Threatens Leak
Security Week reports that Instructure is the latest edtech firm to fall prey to hackers. Based in Salt Lake City, Utah, the edtech firm is best known for Canvas, one of the most widely used learning platforms across educational institutions and other organizations. Disclosed on April 30, the cyberattack was blamed for “disruption to tools […]
Senators Investigate Vendor Cyberattack Exposing Sensitive Student Data; Demand Transparency
DEFCROS News reports: Senators Maggie Hassan and Jim Banks are pressing for answers from Navigate360 following a cyberattack that reportedly compromised sensitive student data from school safety tip lines. The incident has raised significant concerns about the security of information intended to protect students and the integrity of the systems designed to facilitate anonymous reporting. […]
P3 Advertised 20+ Years and 0 Security Breaches. They had to reset their counter.
Will P3 wind up on a vendors not to be trusted list? DataBreaches.net reports: P3 Global Intel advertises itself as a “fully integrated and state-of-the-art tip acquisition and tip management solution that has quickly become the leading choice of Crime Stoppers Programs, Law Enforcement Agencies, Campus Safety Programs, and Federal Agency Initiatives.” 35,000 U.S. schools use P3 Campus, which […]
Monroe University data breach affected 321,000
The Minnesota Department of Human Services’ vendor breach was not the only recent breach disclosed that affected more than 300,000 people. Monroe University in New York also disclosed a breach involving a lot of sensitive information. From their January 13 notification letter: We are posting this notice to inform our community of a data security […]
Ontario and Alberta privacy commissioners release investigation findings into PowerSchool breach affecting school boards and other educational bodies
TORONTO, ON (November 18, 2025) — Ontario and Alberta information and privacy commissioners have released the findings of their investigations into a massive privacy breach involving PowerSchool education technology (edtech) used by schools in their respective provinces. The incident, which affected millions of Canadians across the country, highlights the importance for educational bodies, including school boards, […]