Cyberattack Disrupts Canvas Learning Platform for McHenry County Schools A cyberattack this week targeted Canvas, an online learning management system used by multiple McHenry County, Illinois school districts and McHenry County College, causing temporary outages and exposing student and staff data. Woodstock School District 200 confirmed that Instructure, Inc., Canvas’s parent company, notified them of a data breach allowing unauthorized access to certain system information. The exposed data may have included student names, email addresses, student ID numbers, and Canvas messages, though passwords, dates of birth, government identifiers, and financial details were reportedly not compromised. The district’s security measures including two-factor authentication, restricted external email access, and automated access controls remain in place, with ongoing consultations with cybersecurity experts to strengthen defenses. Community High School District 155 also reported that Instructure detected a cybersecurity incident in late April, with unauthorized access leading to the potential exposure of similar data. Like District 200, District 155 stated there was no evidence of misuse and that the vulnerability had been addressed. Both districts advised monitoring for suspicious communications while assuring families that student and staff data security remains a priority. McHenry County College did not respond to requests for comment. Meanwhile, several other local districts including McHenry 156, Crystal Lake 47, Harvard 50, Marengo 154, Marengo-Union 165, and Huntley 158 confirmed they do not use Canvas. Johnsburg School District 12 acknowledged a teacher had previously used the free version but stated it had not been active in the past six months and was not affected by the breach. The incident highlights the growing cybersecurity risks facing educational institutions reliant on digital learning platforms.