Canvas Breach Disrupts Schools & Colleges Nationwide
2026-05-11T19:23:36Z•aeb2d1938275636fa3652f2491fafd202beba877a95e05076169fe76ab615513
What happened
Multiple high-impact cyber incidents reported: a major data-extortion attack against Canvas defaced its login page and threatened to leak data on ~275 million students/faculty across ~9,000 institutions; a Brazilian anti-DDoS firm was implicated in enabling a botnet used to DDoS ISPs; a senior ‘Scattered Spider’ member (Tyler Robert Buchanan) pleaded guilty to phishing-related fraud and identity theft; Microsoft and other vendors issued large Patch Tuesday updates (April 2026) addressing numerous vulnerabilities including a SharePoint Server zero-day and a Windows Defender flaw dubbed “BlueHam
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- aeb2d1938275636fa3652f2491fafd202beba877a95e05076169fe76ab615513
- Enrichment time
- 2026-05-11T19:23:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.