Massive Canvas cyberattack could expose millions of student records

A cyberattack on Canvas, the widely used learning management system, may have exposed names, email addresses, student ID numbers, and messages for millions of users, including many Utah schools; financial data, dates of birth, SSNs, and passwords were not involved; the hacker group ShinyHunters claimed credit, and Instructure says the incident is resolved with ongoing scope investigation; Utah law requires parent notification, and while overall identity theft risk is low, data could be used for phishing.