Wake County Schools Reports Canvas Data Breach, Exposing Student and Staff Information
The Wake County Public School System has alerted families about a cybersecurity breach involving Canvas, the education platform used by students and staff. The incident, discovered on April 30, occurred 11 days earlier on April 25, potentially exposing personal data of current students and employees.
While officials confirmed that passwords, birth dates, and financial information were not compromised, the breach has raised concerns among parents and educators. Lisa Baildon, a parent of a Millbrook High School student, expressed worries about the unknown motives behind the attack and the security measures in place to prevent future incidents.
This is the second breach in two years for the district. In 2024, a PowerSchool contractor’s credentials were compromised, leading to the exposure of names, addresses, and email information. Following that incident, the North Carolina Department of Public Instruction transitioned to a new student data management system.
Parents and teachers, including Wake County educator Wendy Carvajal, have voiced frustration over the repeated security lapses. Cybersecurity experts, such as Kimberly Simon of Growth Office Partners, have emphasized the need for heightened vigilance, recommending multi-factor authentication, unique passwords, and monitoring for phishing attempts.
The district continues its investigation, urging users to watch for suspicious activity. State school leaders have reinforced the importance of cybersecurity awareness for both schools and families.
Source: https://abc11.com/post/wake-schools-notify-parents-canvas-data-breach/19054909/
WAKE COUNTY SCHOOLS cybersecurity rating report: https://www.rankiteo.com/company/wake-county-schools
"id": "WAK1778128534",
"linkid": "wake-county-schools",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Current students and employees',
'industry': 'Education',
'location': 'Wake County, North Carolina, USA',
'name': 'Wake County Public School System',
'type': 'School District'}],
'customer_advisories': 'Urged users to watch for suspicious activity',
'data_breach': {'personally_identifiable_information': 'Names, addresses, and '
'email information '
'(from prior breach)',
'sensitivity_of_data': 'Not passwords, birth dates, or '
'financial information',
'type_of_data_compromised': 'Personal data'},
'date_detected': '2024-04-30',
'description': 'The Wake County Public School System reported a cybersecurity '
'breach involving Canvas, the education platform used by '
'students and staff. The incident potentially exposed personal '
'data of current students and employees.',
'impact': {'brand_reputation_impact': 'Negative impact due to repeated '
'security lapses',
'customer_complaints': 'Concerns and frustration among parents and '
'educators',
'data_compromised': 'Personal data of current students and '
'employees',
'payment_information_risk': 'None (passwords, birth dates, and '
'financial information were not '
'compromised)',
'systems_affected': 'Canvas education platform'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Need for heightened vigilance, multi-factor '
'authentication, unique passwords, and monitoring for '
'phishing attempts',
'post_incident_analysis': {'corrective_actions': 'Transitioned to a new '
'student data management '
'system after prior breach'},
'recommendations': ['Implement multi-factor authentication',
'Use unique passwords',
'Monitor for phishing attempts',
'Enhance cybersecurity awareness for schools and '
'families'],
'references': [{'source': 'Wake County Public School System'}],
'response': {'communication_strategy': 'Alerted families about the breach',
'enhanced_monitoring': 'Urged users to watch for suspicious '
'activity'},
'stakeholder_advisories': 'State school leaders reinforced the importance of '
'cybersecurity awareness',
'title': 'Wake County Schools Canvas Data Breach',
'type': 'Data Breach'}