Mass cybersecurity breach of learning platform hits Canadian post-secondary schools
A cybersecurity breach targeting Instructure’s Canvas learning platform has affected over 9,000 schools globally, including major Canadian institutions like the University of Toronto, UBC, and Simon Fraser University. The incident exposed student names, emails, and messages, with no evidence of password or financial data compromise, though investigations by privacy commissioners and law enforcement are ongoing.
Instructure, the company behind the Canvas learning platform, confirmed on April 29 that it detected unauthorized activity in its system, prompting an investigation. The breach has impacted over 9,000 schools worldwide, including Canadian post-secondary institutions such as the University of Toronto, Mohawk College, OCAD University, Western University’s Ivey Business School, UBC, Simon Fraser University, and the University of Alberta. The affected data includes student names, emails, and internal messages, but Instructure stated there is no evidence that passwords, financial information, or government identifiers were compromised. The platform was temporarily taken offline but has since been restored, with the investigation ongoing alongside third-party forensic experts and law enforcement. Canada’s federal privacy commissioner’s office confirmed it is reviewing the breach and has reached out to Instructure for further details. Ontario’s privacy commissioner also announced it is investigating the incident, emphasizing that educational institutions remain responsible for protecting student data regardless of third-party processing. This breach follows a 2024 cyber extortion attack on PowerSchool, another education software firm, which resulted in over five million Canadians being affected. Privacy watchdogs in Ontario and Alberta later found that school boards lacked adequate breach response plans and recommended stronger monitoring and data protection policies. Instructure has not disclosed whether a ransom was paid or if further details will be released as the investigation continues.
This content was automatically generated and/or translated by AI. It may contain inaccuracies. Please refer to the original sources for verification.