Canvas Breach Disrupts Schools & Colleges Nationwide
2026-05-09T19:23:29Z•8e6eb508f2e89652a9641a52d8400c6ea1d4fac5195789f626d8a7a529f50c9e
DDoSIoT botnetSIM‑swap/SMiShingbotnetcredential theftcybercrimedata extortioneducation sectorlaw enforcement actionsnation‑statepatch managementphishingransomwarerouter vulnerabilitieswiperzero‑day
What happened
Multiple high-impact cyber incidents reported: a widespread data‑extortion attack against the Canvas education platform defaced its login page and threatened to leak data on ~275 million students and staff across ~9,000 institutions, disrupting classes nationwide; a Brazilian anti‑DDoS vendor was implicated in running/enabling a botnet used to attack ISPs; a senior member of the Scattered Spider criminal group pleaded guilty to SIM/SMS phishing‑based intrusions that enabled high‑value breaches and crypto theft; Russian-linked actors exploited known flaws in legacy routers to harvest Microsoft
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 8e6eb508f2e89652a9641a52d8400c6ea1d4fac5195789f626d8a7a529f50c9e
- Enrichment time
- 2026-05-09T19:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.