Canvas Breach Disrupts Schools & Colleges Nationwide
2026-05-12T19:23:35Z•19763ab976600210546cfce1d86c0f4ef9086ad092232e330a87dae10c4938a5
AisuruCanisterWormCanvasDDoSGandCrabIoT botnetIranJackSkidKimwolfMicrosoft Office tokensMossadREvilRussiaScattered Spider','legal_action'UNKNanti-DDoS abusebotnetcredential harvestingdata extortioneducationnation-stateransomwarerouter compromisetoken theftwiper
What happened
KrebsOnSecurity feed reports multiple high-impact incidents and trends: a major data-extortion attack against the Canvas education platform that defaced the login page and threatened to leak data on ~275 million students and staff across nearly 9,000 institutions, disrupting classes nationwide; a Brazilian anti‑DDoS firm alleged to have enabled a botnet used in sustained DDoS campaigns against ISPs; a senior member of the “Scattered Spider” cybercrime group pleading guilty for SIM‑swap/SMS phishing intrusions that led to large crypto thefts; and nation‑state and large-scale criminal operations
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 19763ab976600210546cfce1d86c0f4ef9086ad092232e330a87dae10c4938a5
- Enrichment time
- 2026-05-12T19:23:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.