San Antonio Schools Hit by Cyberattack on Canvas Learning Management System
The Alamo Colleges District confirmed on Thursday that it is responding to a global cybersecurity incident targeting Canvas, a widely used learning management system (LMS). The attack has disrupted operations at multiple San Antonio-based institutions, including the University of Texas at San Antonio (UTSA), the University of the Incarnate Word (UIW), and the Alamo Colleges District itself.
The incident, which appears to be part of a broader wave of cyber threats, has caused outages and service interruptions for students and faculty relying on Canvas for coursework, assignments, and communication. While details on the nature of the attack such as whether it involves ransomware, data breaches, or other malicious activity remain limited, the affected institutions are working to restore functionality and assess potential risks.
The timing of the attack coincides with a critical period for academic institutions, as many prepare for midterm exams and ongoing coursework. The full extent of the impact on students, faculty, and administrative operations is still under evaluation. No specific threat actor or motive has been publicly identified at this time.
Canvas TPRM report: https://www.rankiteo.com/company/canvas
Alamo Colleges District TPRM report: https://www.rankiteo.com/company/alamo-colleges
"id": "canala1778262974",
"linkid": "canvas, alamo-colleges",
"type": "Cyber Attack",
"date": "5/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"
{'affected_entities': [{'customers_affected': 'Students and faculty',
'industry': 'Education',
'location': 'San Antonio',
'name': 'Alamo Colleges District',
'type': 'Educational Institution'},
{'customers_affected': 'Students and faculty',
'industry': 'Education',
'location': 'San Antonio',
'name': 'University of Texas at San Antonio (UTSA)',
'type': 'Educational Institution'},
{'customers_affected': 'Students and faculty',
'industry': 'Education',
'location': 'San Antonio',
'name': 'University of the Incarnate Word (UIW)',
'type': 'Educational Institution'}],
'description': 'The Alamo Colleges District confirmed a global cybersecurity '
'incident targeting Canvas, a widely used learning management '
'system (LMS). The attack has disrupted operations at multiple '
'San Antonio-based institutions, including the University of '
'Texas at San Antonio (UTSA), the University of the Incarnate '
'Word (UIW), and the Alamo Colleges District itself, causing '
'outages and service interruptions for students and faculty.',
'impact': {'downtime': 'Service interruptions and outages',
'operational_impact': 'Disrupted coursework, assignments, and '
'communication for students and faculty',
'systems_affected': 'Canvas Learning Management System'},
'investigation_status': 'Ongoing',
'response': {'recovery_measures': 'Working to restore functionality'},
'title': 'San Antonio Schools Hit by Cyberattack on Canvas Learning '
'Management System',
'type': 'Cyberattack'}