Canvas Cyberattack Disrupts Finals, Threatens Student Data

ShinyHunters claimed responsibility and threatened to leak data tied to nearly 9,000 schools and 275 million individuals; many colleges postponed finals while Instructure restored service.

Overview

A summary of the key points of this story verified across multiple sources.

1.

Instructure said Canvas was available again to most users by late Thursday, though some schools continued blocking access while assessing security risks.

2.

The hacking group ShinyHunters claimed responsibility and said nearly 9,000 schools and 275 million individuals' data could be leaked if ransom wasn't paid by May 6, then extended the deadline, a threat analyst said.

3.

The University of Massachusetts at Dartmouth postponed exams scheduled for Friday and Saturday, and the University of Illinois postponed exams set for Friday, Saturday or Sunday, while Montgomery County Public Schools limited Canvas access.

4.

Canvas is used by over 8,000 school districts and universities, and the outage affected major institutions including Columbia, Princeton, Rutgers and the University of California network.

5.

Instructure's chief information security officer said the breach appeared to involve student ID numbers, email addresses, names and messages, and experts urged vigilance against phishing and recommended strong passwords and multifactor authentication.

Written using shared reports from
21 sources
.
Report issue

Analysis

Compare how each side frames the story — including which facts they emphasize or leave out.

Center-leaning sources frame the Canvas hack as a widespread operational crisis by using dramatic descriptors (e.g., 'academic anarchy,' 'chaos'), prioritizing first-person accounts from students and professors, and foregrounding institutional responses (Instructure, FBI). The piece emphasizes disruption and security risk through selective quotes and an incident-focused structure that catalogs school impacts.