Education (K-12)

❓What:

• Frontline says its security team identified a vulnerability in a third-party software product on August 14, 2026, which allowed unauthorized access to part of its environment. infosecurity-magazine

• Exposed data includes Social Security numbers, email addresses, and physical addresses. Bleeping Computer

• In at least one district, all employees were affected. Another district’s notice listed 1,210 affected employees. Bleeping Computer

• It is unclear how many districts or individuals were affected in total. Bleeping Computer

May 8th, 2026

❓What:

• The ShinyHunters ransomware/extortion group compromised and defaced Canvas LMS login portals used by hundreds of colleges and universities worldwide.

• Attackers displayed ransom messages directly on login pages, claiming they stole data tied to approximately 8,800 institutions and up to 280 million records. The breach reportedly exposed student and faculty names, email addresses, IDs, and private messages.

• The incident caused widespread outages and login disruptions during final exam periods.

November 20th, 2025

❓What:

• New cyber intelligence pinpoints the education industry as the most targeted industry globally this year, with more than 4,000 weekly attacks per organization (yes, you read that right).

• This figure represents a sustained 24% year-over-year increase in weekly attacks (~3,500 weekly attacks in 2024).

• Because educational institutions often lack the resources for robust security counter-measures, adversaries have made them the target of attack, viewing them as "target rich, cyber poor" (as coined by CISA's K-12 Cybersecurity Initiative).

Who:

• Hacker targeting PowerSchool, a K-12 education tech provider.

• Over 62.4 million students and 9.5 million teachers reportedly affected.

What:

• Threat actor used stolen credentials to access PowerSchool’s PowerSource customer portal.