Cyberattack Disrupts Canvas Learning Platform, Affects Thousands of Schools
A cyberattack on the Canvas learning management system disrupted access for thousands of educational institutions worldwide, impacting students and faculty during critical exam periods.
A cyberattack on the Canvas learning management system disrupted access for thousands of educational institutions worldwide, impacting students and faculty during critical exam periods. The hacking group ShinyHunters claimed responsibility, alleging they accessed data from nearly 9,000 schools globally, including billions of private messages and other records.
Instructure, the company behind Canvas, confirmed the breach involved unauthorized access to user data such as names, email addresses, student ID numbers, and messages among users. They stated there was no evidence that passwords, dates of birth, government identifiers, or financial information were compromised.
The attack led to widespread disruptions, with students and faculty unable to access essential resources like grades and course materials. Colleges and universities scrambled to reschedule final exams and extend assignment deadlines. Some institutions, such as the University of Texas at San Antonio, delayed finals scheduled for Friday in response to the outage.
In response to the breach, Instructure took Canvas offline to contain the incident and investigate further. They have since restored service for most users and are working with a third-party forensics firm to assess the full impact. The company has also temporarily shut down Free-For-Teacher accounts, which were exploited during the attack.
The incident underscores the vulnerability of educational institutions' reliance on centralized digital platforms and highlights the growing threat of cyberattacks on the education sector. Experts emphasize the need for heightened vigilance and robust cybersecurity measures to protect sensitive student and faculty information.