Skip to main content
    School Portal System Canvas Hit by Hackers Leaving Extortion Messages
    Cybersecurity
    Important
    2 min read

    School Portal System Canvas Hit by Hackers Leaving Extortion Messages

    Hackers changed login screens for Canvas, used by many schools. If your child's school uses Canvas, watch for suspicious messages and contact the school.

    Source

    BleepingComputer

    Original headline: Instructure confirms hackers used Canvas flaw to deface portals

    Plain-English summary by GetCyberRight. Read the full report at the source above.

    Published Monday, May 11, 2026Updated Monday, May 11, 20262 min read
    Share:

    Education technology company Instructure confirmed that hackers used a security flaw to modify Canvas login portals and leave extortion messages. Canvas is one of the most widely used online learning systems in schools and universities. The hackers changed what students and parents saw when they tried to log in, displaying threatening messages demanding payment. If your child's school or your college uses Canvas, you may have been affected. Canvas is used by thousands of schools across the country for assignments, grades, and communication between teachers and families. The hackers did not necessarily steal your information, but they did gain enough access to change what you see on the login screen. Any school using Canvas could have been targeted.

    Here is what you should do right now:

    1. Contact your child's school or your college to ask if their Canvas portal was affected and what steps they are taking.
    2. Do not click on any links or pay any money if you see unusual messages on your school's Canvas login page.
    3. Change your Canvas password as a precaution, and make sure it is different from passwords you use for other websites.
    4. If you use the Canvas app on your phone, delete it and reinstall it after changing your password.
    5. Watch your email for official communications from your school about this issue, but be careful of fake emails pretending to be from the school. Protect your family's school accounts by using strong, unique passwords for educational platforms. Enable two factor authentication if your school's Canvas system offers it. Teach your children to tell you immediately if they see anything strange or scary on their school websites. School systems are frequent targets for hackers, so staying alert and communicating with your school's administration helps keep everyone safer.

    Protect Yourself

    Use our Cyber Threat Radar to check if you're affected and take action.

    Found this useful?

    Share it with someone who could use a heads-up.

    Share:

    Curated from trusted cybersecurity sources by GetCyberRight

    Source: BleepingComputer

    Discussion

    0

    Sign in to join the discussion.

    Stay ahead of cyber threats

    Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.