Are Colleges Moving Away From Canvas After Last Spring’s Data Breach? What Parents Should Know
The vinyl booth stuck to the back of my jeans last month when I met my daughter Mia for breakfast near her state university campus. She stirred a too-sweet orange juice and tapped her phone, showing me her fall class schedule. Half her bio department courses are listed on a link I didn’t recognize—Moodle, not Canvas. “Remember that data breach email I got back in May?” she said. “They finally switched everything over this semester.”
I still remember that email. Mia forwarded it to me a day after the breach news broke, and it said Canvas’s security incident had exposed her full name, student ID, and email address. For a few hundred students at her school, partial social security numbers were also leaked. I spent a panicked Saturday that weekend pulling her credit report and researching what to do next. Over the summer, I started noticing the same question popping up again and again in my college parent Facebook group: are all colleges ditching Canvas after the breach? Is my kid’s information even safe there? I texted a few people I know who work in higher ed to get a clearer picture.
My cousin Sarah is an adjunct biology professor at a community college two hours away. She wrote back right away: her school put out a bid for a new learning management system two weeks after the breach was announced. They’re testing Blackboard Ultra right now, and plan to fully switch over by next fall. “We were already annoyed with Canvas’s price hikes and the glitchy new gradebook,” she told me on the phone later. “The breach was just the push the admin needed to actually approve the budget to switch. Half the faculty are happy about it, honestly. The other half are mad they have to rebuild all their content over summer break.”
But not everyone is switching. My niece Lila goes to a small liberal arts college in Ohio, and their whole campus still uses Canvas. She told me the IT department sent out an email over the summer saying they’d add mandatory two-factor authentication for all users, and stop storing sensitive student data like social security numbers directly on Canvas. They aren’t switching, because switching would cost an estimated $2 million in migration and training costs, and the college just doesn’t have that in the budget this year.
What I’ve found is that there’s no one-size-fits-all answer right now. A lot of larger public universities and schools that had a lot of student data exposed in the breach are actively moving away from Canvas, or at least testing alternatives. Smaller schools and schools that only had a handful of people affected are mostly just updating their security protocols and staying put. It’s not a mass exodus, like some posts made it out to be over the summer. It’s a slow, messy transition that’s going to play out over the next three to five years for most schools.
As a parent, the biggest thing I’ve realized is that I don’t have to panic about whether my kid’s school is still using Canvas, but there are a few small, concrete things I can do to keep her info safe and avoid unnecessary headaches. After the breach notification, I sat down with Mia for 15 minutes and helped her set up a free fraud alert through the three major credit bureaus. You don’t need to pay for a fancy credit monitoring service to do this—you can do it for free through each bureau’s website, and it lasts for a year, which is enough time to flag any unusual activity if someone does try to use her information. That’s way more useful than stressing about whether the school is switching LMS or not.
The other thing I reminded Mia to do is download all of her old coursework, graded assignments, and syllabi to her personal Google Drive any time the school switches systems. She told me a girl in her sorority lost all of her grad school application writing samples that were stored on Canvas when the bio department switched over—she hadn’t saved a copy anywhere else, and she had to ask three professors to help her reconstruct everything. It’s a two-minute task to download a batch of files, and it saves so much trouble later.
If your kid is stressed about learning a whole new system mid-college, most IT departments put on free drop-in help sessions during the first two weeks of the semester, and post 5-minute tutorial videos on their website. I told Mia to go to one if she’s having trouble finding her assignments, instead of stressing about it for a week before asking for help. Most kids don’t even think to use the free help that’s already available on campus.
Last week, Mia sent me a quick video from her bio lecture. Her professor was fumbling through the new Moodle interface, trying to pull up the day’s slides, and the whole class was quietly laughing. No one has it all figured out yet. Some colleges will leave Canvas over the next few years, some will stay. Right now, it’s just one more small transition that college kids and faculty are muddling through. The breach was a big wake-up call for schools, but for parents, the real work is just the small, boring stuff: checking credit, saving files, pointing your kid to the free help that’s already there. That’s all you can do, really.
Please indicate: Thinking In Educating » Are Colleges Moving Away From Canvas After Last Spring’s Data Breach