American Heritage Charter School Data Breach Lawsuit Investigation
Received a May 2026 breach notice from American Heritage Charter School?
Dapeer Law, P.A. is investigating a potential class action against American Heritage Charter School, an Idaho Falls-based public charter school, on behalf of students, families, staff, and other Canvas users whose personal information may have been exposed in the May 2026 cyber incident affecting the school's Canvas Learning Management System account.
Who may qualify
You may be eligible to participate in a class action if any of the following applies:
- You received a data breach notification letter from American Heritage Charter School dated May 2026.
- You are a current or former American Heritage Charter School student, parent, guardian, employee, or other Canvas account holder whose information may have been on the platform during the period of unauthorized access.
- You had personal information held by American Heritage Charter School through its Canvas Learning Management System account, which is hosted by Instructure and administered by Transcend.
- No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
- Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.
Not sure if you qualify?
Send us your notice, we'll confirm your eligibility at no cost.
What happened
On May 1, 2026, Transcend, the administrator of American Heritage Charter School's Canvas Learning Management System account, notified the school that a criminal threat actor had gained unauthorized access to Instructure's systems. Instructure hosts the Canvas platform that the school uses for instruction and communication with students, families, and staff. External forensic specialists were engaged immediately, and Instructure began investigating the scope of the intrusion.
On May 11, 2026, American Heritage Charter School alerted families and staff to the cybersecurity incident, roughly ten days after the vendor's initial alert. According to the investigative report filed with the Idaho Attorney General, the data on the Canvas platform that may have been accessed includes student names, student ID numbers, email addresses, and user messages sent within Canvas. The school states there is no evidence at this time that passwords, dates of birth, Social Security numbers, government-issued IDs, or financial information were involved, and the notice does not announce any complimentary credit-monitoring or identity-protection service.
Although the disclosed data categories do not include Social Security numbers or financial account information, names combined with student IDs, school email addresses, and the contents of private Canvas messages can fuel highly targeted phishing and social-engineering campaigns. Notice recipients should remain alert to unsolicited messages referencing their American Heritage Charter School student record, Canvas login, school email, or any topics that previously appeared in their Canvas conversations.
What to do if you received a letter
Keep your notice letter
Do not discard your American Heritage Charter School breach notice. The letter documents the categories of information the school says were involved and serves as important evidence if you decide to participate in a class action.
Monitor your school email and Canvas account
Because the school's notice does not include complimentary credit monitoring, watch for phishing emails sent to your school or personal address, unfamiliar login alerts on Canvas, and unusual activity on any account that shares your student ID or school email. Save copies of any suspicious messages, as these records may support a future claim.
Place a fraud alert or credit freeze
Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. For K-12 cases, also watch for fraudulent messages claiming to come from school administrators, the registrar's office, IT support, or third-party education vendors, and review past Canvas private messages for any sensitive details that could be reused against you.
Speak with a data breach attorney
Consultations with Dapeer Law are free and confidential. We'll review your American Heritage Charter School notice, explain your options, and advise whether you may be eligible to join a class action.
Submit your notice for a free review
Two minutes online. A licensed attorney reviews every submission.
Breach timeline
Compensation you may be entitled to
Out-of-pocket expenses
Credit freezes, identity restoration services, and other costs incurred responding to the breach.
Time spent monitoring
Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.
Identity theft & fraud losses
Unreimbursed funds stolen from accounts, unauthorized credit lines, or tax refund fraud tied to the breach.
Statutory damages
Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.
Injunctive relief
Court orders requiring American Heritage Charter School and its Canvas vendors to implement stronger data security practices going forward, including additional access controls, more rigorous vendor oversight, and faster notification timelines.
Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.
Common questions
I received a data breach letter from American Heritage Charter School. What should I do? +
Keep your American Heritage Charter School notice letter, change your Canvas and school email passwords, enable Multi-Factor Authentication where available, stay alert for phishing emails sent to addresses tied to your student ID or school account, document any time or money you spend responding to the breach, and consider speaking with a data breach attorney. Because the school's notice does not offer complimentary credit monitoring, you may also wish to place a free fraud alert with the three major credit bureaus.
Am I eligible to join a class action against American Heritage Charter School? +
Anyone who received an American Heritage Charter School breach notice, or whose information was stored in the school's Canvas Learning Management System during the period of unauthorized access, is a likely candidate. Eligibility for any future class action will also depend on your state of residence, the categories of your data that were involved, and any documented losses or out-of-pocket expenses.
How much money could I receive from a class action lawsuit? +
Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.
What personal information was exposed in the breach? +
The school's public notice identifies student names, student ID numbers, email addresses, and user messages sent within Canvas as the categories of information that may have been accessed. The notice states there is no evidence that passwords, dates of birth, Social Security numbers, government-issued IDs, or financial information were involved. Your individual letter is the most reliable source for what was associated with your account, so we recommend reviewing it carefully and saving a copy.
Did American Heritage Charter School offer free credit monitoring? +
No. The American Heritage Charter School breach notice does not announce any complimentary credit-monitoring or identity-protection service at this time. If credit monitoring is added later, this page will be updated.
How many people were affected by the American Heritage Charter School breach? +
American Heritage Charter School has not publicly disclosed how many individuals were affected. The Idaho Attorney General filing referenced above does not include a total count, and this page will be updated as more information becomes available.
Is there a deadline to take legal action? +
Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.
How do I get a copy of the official breach notice? +
The investigative report American Heritage Charter School submitted to the Idaho Attorney General is available on the Idaho AG's website at the link in the Sources & References section below. If you cannot locate your individual letter, Dapeer Law can help you obtain a copy as part of a free consultation.
Sources & references
- Official breach notice filing · Idaho Attorney General, American Heritage Charter School Data Breach Notice (PDF)
- Company · American Heritage Charter School (americanheritagecharterschool.com)
- Credit bureau freezes · Equifax · Experian · TransUnion
- Free weekly credit reports · AnnualCreditReport.com
- Identity theft recovery guide · FTC IdentityTheft.gov
Don't let the deadline decide for you. Submit your claim today.
You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.
