NYC Schools Face Ransomware and Malware Attacks Amid Oversight Gaps

• •NYC schools are experiencing a ransomware breach affecting the Canvas platform.
• •Malware was found on computers in a Manhattan school's shared lab, prompting an investigation.
• •A state audit revealed significant gaps in data oversight and delayed breach reporting.

New York City's public school system is dealing with a ransomware breach affecting the Canvas platform, which has disrupted access for multiple educational institutions. Concurrently, malware was discovered on computers at a shared lab in one Manhattan school. A recent state audit highlighted significant gaps in the oversight of technology and student data management, revealing that nearly half of reported data breaches were not timely reported. The audit also found that the school system lacks a centralized inventory of applications, hindering risk assessments. Approximately 161,000 employees are required to complete annual data privacy training, yet a quarter failed to do so in 2024. The audit covered the period from March 2020 to September 2025, and the incidents reported are not included in its findings. The district is currently investigating the malware incident with local police.