Austin ISD data breach exposes personal information of nearly 45000 people

Austin Independent School District disclosed that a data breach earlier this year exposed the sensitive personal information of nearly 45,000 students and staff.

Austin Independent School District (Austin ISD) is a public school district headquartered in Austin, Texas. Its jurisdiction covers most of Austin, nearby municipalities such as Sunset Valley and San Leanna, and unincorporated areas of Travis County. The district is governed by an elected board of trustees and a superintendent, while its performance and accountability are monitored by theTexas Education Agency.

In a data security notice published on its website, Austin ISD disclosed that it experienced a significant data security incident earlier this year after a cyberattack targeted the third-party service provider responsible for its Canvas/BLEND learning management system, which is used by students in grades 6–12 and district staff.

Canvas/BLEND is an online platform that helps students, teachers, and staff manage educational activities. Austin ISD uses the platform, known as BLEND, to support learning and instructional activities for students in grades 6–12 and district staff.

After detecting the incident on April 29, Instructure, the company that developed Canvas, revoked the attacker’s access and launched an investigation with forensic experts and law enforcement. On May 1, it informed the district that a threat actor had accessed its systems starting April 25, 2026.

“While the company originally reported no impact on our student data, they issued an update on Tuesday, May 5 indicating that our student information was, in fact, involved,” Austin ISD said.

The compromised data included names, email addresses, student ID numbers, and messages exchanged between users on the platform. In a report submitted to the Texas state regulator, the school district said that at least 44,652 individuals were affected by the incident.

Austin ISD a dded that it does not provide the vendor with sensitive personal details, including dates of birth, Social Security numbers, or financial data. The district also noted that its security systems use single sign-on (SSO), which helps protect passwords from exposure during incidents of this nature.

The notorious ransomware group ShinyHunters has claimed responsibility for the cyber attack, replacing the BLEND platform with a message identifying the group as the perpetrators. In a communication sent to the school district, the hackers stated that they were open to negotiating a settlement before May 12. They also warned that to prevent the potential leak of stolen data, the school district should consult a cybersecurity advisory firm and the group privately.

Please take 30 seconds to register

Already have an account? Sign in

"AI-led spear phishing worries me the most" - Darktrace's Dave Palmer

"Crisis or no crisis; security needs to be the same"

"People need to understand that there isn't an invisible force-field that's protecting them"

"The community needs to recognise and understand crime"

"We've seen a marked increase in social engineering attacks"

"AI-led spear phishing worries me the most" - Darktrace's Dave Palmer

"Crisis or no crisis; security needs to be the same"

"People need to understand that there isn't an invisible force-field that's protecting them"

"The community needs to recognise and understand crime"

"We've seen a marked increase in social engineering attacks"

$12M Vanishes in Crypto Heist Targeting Cork Protocol’s Depeg Market

$600 million stolen & returned in biggest ever crypto heist

10-month cyber attack exposes personal data of South Korean diplomats

Closing the exposure window — unifying continuous threat exposure management

Trusting your AI agents

The blind spots in your stack - why fragmented data security fails

Winston House, 3rd Floor, Units 306-309, 2-4 Dollis park, London, N3 1HF