Loudoun County Public Schools announced on May 8 that a cybersecurity incident has affected Instructure, the parent company of Canvas. The school division said that while Canvas is not used by Loudoun County Public Schools, some students and staff may access it through outside organizations such as Northern Virginia Community College, Virtual Virginia courses, or VALLSS training via the Virginia Department of Education.
The update matters because families and staff may be concerned about possible exposure of personal information due to this incident. According to the statement, “it is important to emphasize that, based on the information provided by the vendor at this time, this incident was limited strictly to Instructure’s internal Canvas tools. Instructure has stated that it has no evidence that passwords, dates of birth, government identification numbers, or financial information were involved.” The division referred individuals seeking more details to Instructure’s online incident status update page.
The school system said it is waiting for further guidance from the Virginia Department of Education regarding staff who participated in VALLSS training and any potential next steps. Staff with concerns are encouraged to contact VDOE directly with questions. Students or staff using Canvas through other organizations should reach out to those programs if they have concerns.
Loudoun County Public Schools emphasized its multi-layered security strategy designed to protect student devices and accounts from scams and intrusion. The statement reminded students and staff: “By adhering to these digital safety practices at home and during school hours, students and staff can help protect themselves and their assigned technology.” It also advised against clicking suspicious links or providing login credentials in response to unexpected messages.
The division clarified that its own systems were not impacted by this event. It asked anyone experiencing suspicious activity on LCPS devices or accounts to report it using standard procedures. The statement concluded: “We appreciate your understanding and will provide additional information as needed to support our students, families, and staff.”
