Rockwood Board alerted parents after Instructure/Canvas data breach; district urges vigilance

The Rockwood Board of Education heard an update on a data breach affecting the Instructure Canvas platform and the district’s response.

Superintendent (speaking to the board) said the district was notified on May 5 that it had been impacted. ‘‘We have not been given definitive information about the scope of that, or even all the particulars on the types of data,’’ the superintendent said, adding that the district has prioritized notifying parents and staff.

Bob, a district staff member in the technology department, told the board that Canvas has claimed no passwords or financial information were taken but that names and email addresses likely were exposed. ‘‘When cyber criminals get access to some of the information we're talking about, we're gonna see, most likely targeted phishing,’’ Bob said, urging staff and parents to be cautious about emails, texts or phone calls requesting password resets or personal information.

District presenters said they are in contact with Canvas to obtain more information and that Canvas was working to restore service; technology staff also said they will brief employees directly and provide guidance for closing out the school year where Canvas is used for grade entry and instructional management.

Board members asked for continued communication to families as more details become available. The superintendent said the district will relay any confirmed updates and encouraged vigilance: ‘‘If something doesn’t look right, really think twice about it,’’ the superintendent said.

The update was informational; board members did not take a separate formal vote on cybersecurity actions at the meeting. The district recommended that families and staff treat any Canvas‑related messages with caution and report suspected phishing to district technology staff.