Canvas Breach Disrupts Schools & Colleges Nationwide

2026-05-12T19:23:35Z19763ab976600210546cfce1d86c0f4ef9086ad092232e330a87dae10c4938a5
AisuruCanisterWormCanvasDDoSGandCrabIoT botnetIranJackSkidKimwolfMicrosoft Office tokensMossadREvilRussiaScattered Spider','legal_action'UNKNanti-DDoS abusebotnetcredential harvestingdata extortioneducationnation-stateransomwarerouter compromisetoken theftwiper

What happened

KrebsOnSecurity feed reports multiple high-impact incidents and trends: a major data-extortion attack against the Canvas education platform that defaced the login page and threatened to leak data on ~275 million students and staff across nearly 9,000 institutions, disrupting classes nationwide; a Brazilian anti‑DDoS firm alleged to have enabled a botnet used in sustained DDoS campaigns against ISPs; a senior member of the “Scattered Spider” cybercrime group pleading guilty for SIM‑swap/SMS phishing intrusions that led to large crypto thefts; and nation‑state and large-scale criminal operations

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
19763ab976600210546cfce1d86c0f4ef9086ad092232e330a87dae10c4938a5
Enrichment time
2026-05-12T19:23:35Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.