Canvas Breach Disrupts Schools & Colleges Nationwide
2026-05-10T19:23:31Z•8293d4656f83ea5a383d67befc29b291d9df95944cc2e81883428bd9cd4c3dea
Adobe ReaderAisuruBlueHammerBrazilCanvasChromeDDoSIoT-botnetJackSkidKimwolfMicrosoftMossadOffice-token-theft','doxing','REvil','GandCrab','wiper','CanistrPatch-TuesdayRussiaScattered SpiderSharePointbotnetdata-extortioneducationlaw-enforcementphishingransomwarerouter-exploitzero-day
What happened
Multiple high-impact incidents reported: a large-scale data extortion attack against Canvas defaced login pages and threatened to leak data for ~275 million students and staff across ~9,000 institutions, disrupting classes nationwide; a Brazilian anti‑DDoS firm was implicated in enabling a botnet used to attack ISPs; a senior "Scattered Spider" member pled guilty to role in 2022 account‑takeover/phishing attacks; Microsoft released large Patch Tuesday updates (April: 167 flaws including a SharePoint Server zero‑day and a Windows Defender issue dubbed "BlueHammer"; March: 77 fixes), alongside a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 8293d4656f83ea5a383d67befc29b291d9df95944cc2e81883428bd9cd4c3dea
- Enrichment time
- 2026-05-10T19:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.