Global Canvas Data Breach Impacts OU and Norman Public Schools A hacker extortion group has targeted the widely used learning management system (LMS) Canvas in a worldwide data breach, affecting institutions including the University of Oklahoma (OU) and Norman Public Schools. The incident occurred just ahead of OU’s finals week, raising concerns about potential disruptions to academic operations. The breach was attributed to a cybercriminal group seeking to exploit vulnerabilities in Canvas, a platform used by educational institutions for course management and student data. While specifics on the compromised data remain unclear, the attack highlights risks to sensitive information stored within the system. OU, headquartered at 860 Van Vleet Oval (Copeland Hall) in Norman, Oklahoma, confirmed its involvement in the breach, though further details on the scope and response are pending. The timing of the attack coinciding with a critical academic period underscores the broader threat posed by cyber extortion campaigns targeting education sectors globally. No ransom demands or additional details about the attackers have been publicly disclosed.

Norman Public Schools (NPS) in Oklahoma suffered a ransomware attack by the Hive ransomware team. The attack compromised the names, addresses, Social Security numbers, and financial account numbers for payroll purposes and the other information of the NSP current and former employees – including substitute teachers and summer staff. The exposed information also included about 3,850 employees’ SSNs. NPS offered identity theft protection services to all potentially impacted individuals for twelve (12) months, through IDX including credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.