Cyberattack disrupts Canvas platform as hackers threaten release of student data |
Canvas, the online learning platform used by thousands of schools and universities across the U.S., suffered a widespread outage Thursday after hacking group ShinyHunters claimed responsibility for a cyberattack on parent company Instructure. The disruption affected major institutions including Harvard and the University of Michigan during final exam season, as well as school districts in California, Florida, Georgia, Oklahoma, Oregon, Nevada, North Carolina, Tennessee, Utah, Virginia, and Wisconsin, though most users regained access later in the day. Instructure said Canvas was operational again for most users, although some testing services remained offline. ShinyHunters claimed it accessed data belonging to more than 275m people across nearly 9,000 schools, threatening to release additional information unless Instructure responds by May 12. The group said the stolen data includes personal information such as names, email addresses, student ID numbers, and Canvas messages. Instructure disclosed a cybersecurity incident on May 1 and said forensic experts were investigating. The company stated there was no evidence that passwords, financial information, government IDs, or birthdates were compromised, and said the breach had been contained by May 2. The hacking group briefly posted ransom messages directly on student Canvas pages before those notices were replaced with maintenance alerts. ShinyHunters has previously targeted major companies including Ticketmaster, Microsoft, and AT&T, and has recently focused on education-related organizations.