Threat actors claim to have obtained personal information belonging to approximately 275 million users from Instructure’s Canvas learning management system, affecting students across more than 9,000 schools. Wayzata Public Schools in Minnesota has formally notified parents of affected students in grades 4 through 12. The breach claim has not been independently confirmed by Instructure or CISA; however, the scale of the claim and the involvement of minors’ data represent significant legal, regulatory, and reputational exposure for affected districts and their technology vendors.