AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
Education Cybersecurity
Coverage from ReSecurity, Rocketnews, and others
Schools, colleges, and education platforms hold sensitive student, staff, and family information while relying on interconnected systems and outside vendors.
Incidents range from ransomware that interrupts school operations to flaws or breaches that expose personal records; reported cases have involved platforms such as Infinite Campus and Salesforce-related services, as well as attacks on school networks. Understanding these incidents also means examining how institutions assess vendors, secure access, investigate exposure, notify affected people, and restore services.
Looking Back
1655 Day Timeline
Mar '22
Dec '22
Sep '23
Jul '24
Mar '25
Jan '26
Sep '26
All Articles26 articles
Important
ShinyHunters and FulcrumSec targeted EdTech systems in reported ransomware and data theft incidents, exposing millions of student and staff records and sensitive personal data.
6/16/2026 • Data Breaches & Exposure Events • General
Instructure confirmed a ShinyHunters-linked breach on what date unknown, affecting student information at schools in Massachusetts and Tennessee with exposed names, emails, and messages.
5/5/2026 • Data Breaches & Exposure Events • General
North Carolina Department of Justice reported 2,349 2025 data breaches, emphasizing ransomware growth and the December 2024 PowerSchool exposure affecting millions.
4/15/2026 • Data Breaches & Exposure Events • General
Matthew Lane received a four-year federal prison sentence after a PowerSchool data breach exposed 60 million children and 10 million teachers across the United States.
4/14/2026 • Data Breaches & Exposure Events • General
In North Carolina, Attorney General Jeff Jackson continued an investigation into the 2025 PowerSchool data breach after Matthew Lane's guilty plea and Social Security number exposure.
5/4/2026 • Data Breaches & Exposure Events • General
VentureEd Solutions' Ravenna Hub admissions platform exposed U.S. student and family records through an access control flaw discovered and patched in the 2020s.
2/19/2026 • Data Breaches & Exposure Events • General
Sumner County Schools in Tennessee, after discovering a network security breach, postponed school dates as the FBI and Tennessee Bureau of Investigation assessed potential access to student records.
7/22/2026 • Data Breaches & Exposure Events • General
Columbus, Ohio technology director Sam Orth retired after a 2024 ransomware attack, with a breach report still not publicly scheduled.
6/26/2026 • Data Breaches & Exposure Events • General
Asheville City Schools received a May 5 notice from Instructure about a Canvas vendor breach exposing student and staff identifiers, prompting phishing-risk warnings.
5/8/2026 • Data Breaches & Exposure Events • General
Verizon Business data and cybersecurity experts describe education-sector breaches in 2025 driven by web-application malware, ransomware, and third-party SaaS exposures in the United States.
6/27/2026 • Cybersecurity Tech (Privacy-Relevant) • General
North Carolina officials reported education-industry data breaches in 2025, including a Canvas incident and a prior PowerSchool attack, with emphasis on multifactor authentication and vendor risk.
5/7/2026 • Data Breaches & Exposure Events • General
Great Marlow School closed in Buckinghamshire after a cybersecurity incident, while UK ICO and NCSC data show frequent education-sector incidents and growing concerns about underreporting.
6/11/2026 • Cybersecurity Tech (Privacy-Relevant) • General
Interesting
Springfield Public Schools closed in Springfield, Massachusetts, after a pre-Labor Day cyberattack prompted city, state, and federal investigations into possible exposure of personal information.
9/10/2026 • Cybersecurity (Privacy-Relevant) • General
An educational district accepts complaints about data breaches and cyber events whenever reported through an online form, while restricting student personally identifiable information in submissions.
8/11/2026 • Data Breaches & Exposure Events • General
Grandview School District in Washington State notified affected students, staff, and families in June 2026 after a 2024 unauthorized-file access period was confirmed.
7/7/2026 • Data Breaches & Exposure Events • General
Resecurity reports June 2026 education-sector cyber incidents involving ShinyHunters and FulcrumSec, including Infinite Campus staff data theft and Global Schools Foundation ransomware.
6/17/2026 • Data Breaches & Exposure Events • General
In New York, a district reported to state agencies and the FBI after an outside actor accessed backup files for a lunch processing system and exposed student data.
6/11/2026 • Data Breaches & Exposure Events • General
Bozeman School District #7 disclosed a 2026 phishing incident affecting 2,617 staff members after unauthorized access to names and Social Security numbers.
6/4/2026 • Data Breaches & Exposure Events • General
Termite claimed responsibility for a ransomware-linked data-breach affecting UEI College on May 29, 2026, as of May 30, 2026 reporting.
6/4/2026 • Data Breaches & Exposure Events • General
Belgrade School District confirmed a malware infection and is investigating whether student and staff personal information was compromised, with system repairs expected through June.
5/19/2026 • Data Breaches & Exposure Events • General
Portland Public Schools reported a Canvas learning management system breach in 2026 and is investigating possible student data exposure with Instructure coordination.
5/6/2026 • Data Breaches & Exposure Events • General
An EdTech vendor cybersecurity incident exposed millions of students and forced educational institutions to address breach notification, operational disruption, and vendor management responsibilities.
5/27/2026 • Data Breaches & Exposure Events • General
North Carolina advocates in 2026 cite 2,349 prior-year data breaches exposing nearly 9.3 million residents while debating expanded identity verification rules.
5/19/2026 • Consumer Privacy & Digital Rights • General
Evanston Township High School reported a June 7 ransomware attack that disrupted district systems and internet services while incident response and data exposure assessment continued.
6/8/2026 • Data Breaches & Exposure Events • General
Belgrade School District #44 in Montana disclosed a malware incident, authorized $750,000 for remediation, and continued investigating potential personal-information exposure in May.
5/20/2026 • Cybersecurity Tech (Privacy-Relevant) • General
Rajin Koonjbearry resigned from Dallas Independent School District in October 2021 after delayed and inaccurate public disclosure of a student-linked data breach in Dallas, Texas.
3/1/2022 • Data Breaches & Exposure Events • General