Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Stapleton board adopts updated data‑breach response policy after Canvas incident
Summary
After a Canvas learning‑platform incident that exposed emails, passwords and names, the board voted to adopt an updated data‑breach response policy (3047) that tightens notification responsibilities, the superintendent said.
The Stapleton Public Schools Board of Education voted to revise board policy 3047, its data-breach response policy, following a recent incident involving the Canvas learning management system.
The superintendent briefed the board on the incident, saying the breach involved emails, passwords and names but did not expose financial data. He recommended adopting the updated policy, explaining it clarifies notification responsibilities for affected parties. "What is in Canvas is essentially emails, passwords, names, no financial data or anything like that," the superintendent said during the briefing.
A motion to adopt the revised policy was made, seconded and approved by roll-call vote. Board members who voted yes during the recorded roll call included Chance Connell, Rex, Kim, Frank Kramer and Christy Opel; the motion passed unanimously among members present.
The board did not detail additional remediation steps at the meeting beyond adopting the policy; administrators said they had already issued a notice and will continue monitoring systems and notify affected parties consistent with the updated policy.
The policy revision will be implemented by district staff and incorporated into the district’s incident-response procedures. The board did not provide a timetable for any further reporting on follow-up investigations.
