A major cyberattack disrupted the widely used educational platform Canvas on Thursday, leaving thousands of schools and universities struggling to operate as students prepared for final examinations. The outage triggered widespread confusion and highlighted the growing dependence of educational institutions on digital learning systems.
The hacking group known as ShinyHunters claimed responsibility for the breach, according to Luke Connolly, a threat analyst at cybersecurity firm Emisoft. The company behind Canvas, Instructure, did not immediately respond to requests for comment or clarify whether the platform was taken offline as a precautionary measure or as a direct result of the attack.
Canvas is a critical academic management system used by schools and universities worldwide to organize grades, assignments, lecture recordings, course materials, and communication between students and faculty. According to Connolly, the hackers claimed that nearly 9,000 educational institutions were affected and that billions of private messages and records may have been accessed.
As the platform became inaccessible, students across multiple universities turned to social media to report issues logging in and accessing essential course materials needed for exam preparation. The disruption sparked concerns among students and educators alike during one of the most critical periods of the academic year.
Screenshots shared by Connolly indicated that the hacking group began threatening to leak the allegedly stolen data earlier this week, setting deadlines for Thursday and May 12. He noted that the extended timeline could suggest ongoing negotiations related to potential extortion demands.
Cybersecurity experts have repeatedly warned that educational institutions remain attractive targets for cybercriminals due to the vast amount of sensitive digital information they store. Recent years have seen major cyberattacks targeting school systems, including Minneapolis Public Schools and the Los Angeles Unified School District.
Connolly also noted similarities between the Canvas breach and a previous cyberattack involving PowerSchool, another education technology provider. In that earlier incident, a Massachusetts college student was charged in connection with the breach.
ShinyHunters has been described as a loosely connected group of young hackers based primarily in the United States and the United Kingdom. The group has previously been linked to several high-profile cyberattacks, including an incident involving Ticketmaster’s parent company, Live Nation.
Universities and school districts across the United States quickly issued alerts to students, faculty, and parents regarding the outage. The University of Iowa’s College of Public Health described the situation as a “national-level cybersecurity incident,” expressing hope for a swift resolution.
Virginia Tech acknowledged the impact on final exams and end-of-semester activities, while the University of Florida advised students to remain cautious of phishing emails or fraudulent messages appearing to come from Canvas. Similar warnings were issued by institutions including the University of New Mexico.
Faculty members also reported difficulties adapting to the disruption. Damon Linker, a senior lecturer at the University of Pennsylvania, wrote on social media that his students relied heavily on Canvas for lecture slides and reading materials ahead of upcoming exams, describing the situation as leaving academia “dead in the water.”
The outage affected institutions nationwide, including Harvard University and Johns Hopkins University, where students encountered errors while attempting to view grades and course content. Public school districts also sought to reassure parents, with officials in Spokane, Washington, stating they were not aware of any sensitive district data being compromised.
In response to the disruption, some institutions, including the University of Texas at San Antonio, announced delays to scheduled final exams while administrators worked to restore access to academic systems.
Source: Associated Press News
