Cybersecurity breach hits Canvas learning platform used by CMS, other Charlotte-area school districts
Publish Date: 2026-05-07 12:12:00
Source Domain: www.wcnc.com
Multiple NC school districts are investigating a nationwide Canvas breach that exposed basic student info.
CHARLOTTE, N.C. — Several school districts across the region are responding to a cybersecurity incident involving Instructure, the company behind Canvas, a widely used learning management system.
Charlotte-Mecklenburg Schools, Cabarrus County Schools, Catawba County Schools, Kannapolis City Schools and Union County Public Schools all confirmed they were impacted by or are investigating the breach, which appears to be nationwide in scope. The North Carolina Department of Public Instruction is coordinating with Instructure and state technology officials as the investigation continues.
Instructure identified and resolved the issue, and Canvas remains fully operational, according to CMS. The company reports that while basic directory-style information, such as names and student IDs, may have been accessed, no passwords, dates of birth, financial information or government identifiers appear to have been involved.
“There is no evidence of ongoing unauthorized access,” CMS said in a statement to families on Wednesday.
CMS said it acted immediately upon learning of the breach, auditing access and administrative permissions and coordinating with state and vendor contacts to ensure recommended safeguards were in place.
Cabarrus County Schools confirmed it was impacted and said it has been notified that the breach was contained and the platform is secure. Catawba County Schools said NCDPI is investigating in coordination with Instructure, adding that the incident appears to involve limited personal information.
Kannapolis City Schools said its technology staff began working with…
