A learning management software used by Park City School District experienced a data breach on Thursday that exposed certain personal data belonging to district students, teachers and other staff, as well as those in other Utah school districts.
“Instructure, the provider of the Canvas learning management system, has informed us that they experienced a nationwide cybersecurity incident on Saturday, April 25th,” Park City School District said in a press release. “Instructure notified us on May 5th that district information was included in that incident. Please note, this was not a security lapse in our district IT systems.”
Instructure reported that data from 275 million users (including students, teachers, and other staff) was affected. Instructure also reported that “the attackers gained access to personal information such as names, email addresses, and student ID numbers. User messages were also compromised.”
“At this time, we have found no evidence that passwords, dates of birth, government identifiers, or financial information were involved,” Instructure said.
The district stressed that the breach involves Instructure’s systems and platforms and was not the result of Park City School District’s systems and security procedures.
“We’re waiting to receive additional information from Instructure, but wanted to inform our community,” the district said. “As we receive more information, we’ll provide an update with those details.”