Skip to main content

Orange County Public Schools student data safe after Canvas cyberattack, district says

Company paid deal to keep stolen student data from going public

OCPS leaders meet with state over potential safety violations

ORLANDO, Fla, – Orange County Public Schools was not impacted by the cyberattack on the Canvas online learning platform earlier this month, the company confirmed.

Instructure, the company that operates Canvas, initially warned that hackers accessed names, email addresses, student ID numbers, and private messages from millions of students across the United States.

Recommended Videos


An estimated 9,000 schools worldwide use the platform, including major universities such as Harvard and Princeton.

“Dear OCPS families and employees,

This is an update to the Canvas cybersecurity incident earlier this month. The district received official confirmation from Instructure, the company that owns Canvas, that after review, OCPS was not impacted by their data incident and no OCPS data was leaked.

We want to thank you again for your patience and understanding through this unfortunate situation."

Orange County Public Schools

OCPS is among several local districts that use Canvas. Instructure has since confirmed that no data from the district was leaked in the breach.

Instructure confirmed on May 2 that an unauthorized third party gained access to certain user data. The company said no passwords, Social Security numbers, birth dates or financial information were involved.

A hacking group called ShinyHunters claimed responsibility for the breach. Hackers set a May 12 deadline, threatening to publish stolen data unless Instructure paid a ransom. Instructure ultimately struck a deal with the hackers to delete the stolen data.


Loading...