SUMMARY

The online education platform Canvas is mostly back online Friday after a cyberattack left students and teachers at thousands of schools and universities scrambling. The attack has raised many questions about the vulnerability of schools, the dependence on such platforms and other risks. Ali Rogin speaks with threat intelligence analyst Luke Connolly about those concerns.

NOTE: If you are short on time, watch the video and complete this See, Think, Wonder activity: What did you notice? What did the story make you think about? What would you want to learn more about?

News alternative: Check out recent segments from the News Hour, and choose the story you’re most interested in watching. You can make a Google doc copy of discussion questions that work for any of the stories here.

WARM-UP QUESTIONS

1. What is Canvas?
2. Who did the hack affect?
3. When did the cyberattack occur?
4. How many users does Canvas have? How many users do the hackers say were affected?
5. Why do cybercriminals target software providers like Canvas, according to Luke Connolly?

ESSENTIAL QUESTIONS

• Do you think schools should rely on outside technology companies to keep personal information about students? What about to communicate with students? Why/why not? (i.e. private messaging between teachers and students, access to course materials, ability to manage grades, etc.)
• Luke Connolly says a school district's budget is the main reason why schools have turned to outside service providers like Canvas as opposed to setting up the communication system in-house (inside the school district). Note: Public schools in America are primarily funded by local/state governments, which are mainly based on people's property taxes.
  • How did schools communicate with students before ed tech platforms like Canvas were invented? What were budgets like then? If you are not sure, how could you find out?

Media literacy: The News Hour interviewed a cybersecurity expert for this story. Who else would you like to see interviewed for this piece and why?

WHAT STUDENTS CAN DO

Why is your personal information or "data" of such value to entities ranging from companies like Google to hackers?

Take a moment to jot down a list of what information you think your school maintains about you. Share responses together as a class. If you are not sure of an item, invite your principal to speak with your class about privacy issues and answer your questions. Did any items surprise you? Why?

Personally identifiable information (PII) includes private information that may reveal your identity and potentially allow cybercriminals to steal your identity. The following items make up your PII, according to the Department of Defense:

1. Social security number (SSN), passport number, driver's license number, taxpayer identification number, patient identification number, and financial account or credit card number
2. Phone number and personal address
3. Biometric records such as photographic image (especially of face or other distinguishing characteristic), x-rays, fingerprints, retina scan, voice signature, facial geometry

Dig deeper: What is FERPA? Learn about FERPA, or the Family Educational Rights and Privacy Act of 1974, the federal law that governs student data in both public and private schools. Take a look at this student privacy page from the Department of Education and watch the video. Note the year of the video. What do you think has changed since the video came out? Read the section "Does the Canvas Breach Trigger a FERPA Violation?" from the article Canvas Breach: What It Means for Schools & FERPA Compliance.

Link: https://www.army.mil/article/233878/privacy_officials_call_for_cautious_telework_practices

Sign up to receive our weekly newsletter with Daily News Lessons and community events.

To provide feedback on News Hour Classroom's resources, including this lesson, click here.