Canvas Cyberattack Disrupts Finals, Threatens Student Data
ShinyHunters claimed responsibility and threatened to leak data tied to nearly 9,000 schools and 275 million individuals; many colleges postponed finals while Instructure restored service.

Security Breach: Cyberattack Targets Liberty U And Other Campuses Across America | The Gateway Pundit | by Seth Segal

When Canvas crashed, colleges had no backup plan
Canvas outage tied to a cyberattack has wreaked havoc on colleges’ final exam season

Hackable Robot Lawn Mower Unlocks a New Nightmare
Overview
Instructure said Canvas was available again to most users by late Thursday, though some schools continued blocking access while assessing security risks.
The hacking group ShinyHunters claimed responsibility and said nearly 9,000 schools and 275 million individuals' data could be leaked if ransom wasn't paid by May 6, then extended the deadline, a threat analyst said.
The University of Massachusetts at Dartmouth postponed exams scheduled for Friday and Saturday, and the University of Illinois postponed exams set for Friday, Saturday or Sunday, while Montgomery County Public Schools limited Canvas access.
Canvas is used by over 8,000 school districts and universities, and the outage affected major institutions including Columbia, Princeton, Rutgers and the University of California network.
Instructure's chief information security officer said the breach appeared to involve student ID numbers, email addresses, names and messages, and experts urged vigilance against phishing and recommended strong passwords and multifactor authentication.
Analysis
Center-leaning sources frame the Canvas hack as a widespread operational crisis by using dramatic descriptors (e.g., 'academic anarchy,' 'chaos'), prioritizing first-person accounts from students and professors, and foregrounding institutional responses (Instructure, FBI). The piece emphasizes disruption and security risk through selective quotes and an incident-focused structure that catalogs school impacts.