Las Lomitas Elementary School District (LLESD) notified the California AG of a data breach involving its Canvas LMS platform. Instructure, the publisher of Canvas, notified LLESD on May 5, 2026, that a criminal threat actor had gained access to LLESD information. The breach affected students in 6th-8th grade during the 2023-2024 school year, their caregivers, and staff. Affected data included first/last names, email addresses, and class enrollments. Instructure stated no passwords, dates of birth, government identifiers, or financial information were involved. LLESD IT confirmed the scope of data. Affected individuals are being contacted directly.