
School Portal System Canvas Hit by Hackers Leaving Extortion Messages
Hackers changed login screens for Canvas, used by many schools. If your child's school uses Canvas, watch for suspicious messages and contact the school.
Source
BleepingComputer
Original headline: Instructure confirms hackers used Canvas flaw to deface portals
Plain-English summary by GetCyberRight. Read the full report at the source above.
Education technology company Instructure confirmed that hackers used a security flaw to modify Canvas login portals and leave extortion messages. Canvas is one of the most widely used online learning systems in schools and universities. The hackers changed what students and parents saw when they tried to log in, displaying threatening messages demanding payment. If your child's school or your college uses Canvas, you may have been affected. Canvas is used by thousands of schools across the country for assignments, grades, and communication between teachers and families. The hackers did not necessarily steal your information, but they did gain enough access to change what you see on the login screen. Any school using Canvas could have been targeted.
Here is what you should do right now:
- Contact your child's school or your college to ask if their Canvas portal was affected and what steps they are taking.
- Do not click on any links or pay any money if you see unusual messages on your school's Canvas login page.
- Change your Canvas password as a precaution, and make sure it is different from passwords you use for other websites.
- If you use the Canvas app on your phone, delete it and reinstall it after changing your password.
- Watch your email for official communications from your school about this issue, but be careful of fake emails pretending to be from the school. Protect your family's school accounts by using strong, unique passwords for educational platforms. Enable two factor authentication if your school's Canvas system offers it. Teach your children to tell you immediately if they see anything strange or scary on their school websites. School systems are frequent targets for hackers, so staying alert and communicating with your school's administration helps keep everyone safer.
Curated from trusted cybersecurity sources by GetCyberRight
Source: BleepingComputerStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles

Canvas Paid Hackers After Student Data Was Stolen During Finals Week
The learning platform used by millions of students just paid ransom to hackers. Here's what families need to know and do right now.
3 min readApple Patches Flaw That Could Expose Your Deleted Messages
Apple fixed critical security holes, including one that could recover deleted chats. Here's what families need to know and do right now.
3 min readApple Just Fixed Critical Security Holes: Update Your Devices Today
Apple released urgent patches for dozens of vulnerabilities in iPhones, iPads, and Macs. One fix stops deleted messages from being recovered without your knowledge.
3 min read
School Portal System Canvas Hit by Security Flaw Allowing Hackers to Post Messages
Instructure confirmed that hackers exploited a weakness in Canvas, the online learning system used by many schools, to modify login pages and post extortion demands.
2 min read