Climate
Privacy
Bob Dylan
Drones
Data Centers
AI Governance
2026 Maine Senate Race
Last Update: 08/01/2026 at 1:00 PM EST
Canvas Breach Disrupts Final Exams
Coverage from CNN, NPR, and others
Articles
16
Active Days
20
The Topic
Canvas, the learning management system used by schools and universities, was disrupted by a cyberattack that hit during final exams and forced some institutions to delay tests, extend deadlines, or shift communications off-platform. Reporting indicates unauthorized access exposed at least some user data, including names, email addresses, student ID numbers, and messages, while Instructure said more sensitive data such as passwords and financial information was not implicated. The incident is significant because it combines platform outage, ransom pressure, and education-sector operational disruption across many institutions.
First Article: 05/07/26
Latest Article: 05/26/26
Summary
- Canvas outage and ransom activity disrupted access to classes, grades, quizzes, and exam workflows during finals week.
- Instructure said unauthorized activity was detected and contained, with outside forensic investigators and law enforcement involved.
- Reportedly exposed data included names, email addresses, student ID numbers, and Canvas messages from affected organizations.
- Several universities and school districts issued alerts, extended deadlines, or moved exams because Canvas was unavailable.
- ShinyHunters claimed responsibility and threatened further data release unless ransom was paid.
- Instructure and some institutions said there was no evidence passwords, dates of birth, government IDs, or financial information were compromised.
- Some schools relied on continuity plans and alternate communication channels to keep instruction moving during the outage.
History
This topic is new, but as new articles are added to it this area will summarize shifts, changes and expansions of the issues.
Featured
05-07-2026
Multiple US universities reported ShinyHunters ransomware notes on Instructure Canvas during spring finals week, while Instructure investigated reported student data exposure.
05-09-2026
Instructure restored most Canvas access after a ShinyHunters-linked data breach, while U.S. schools delayed finals and warned about phishing and credential risks during May 2026 recovery.
05-11-2026
ShinyHunters claimed two intrusions of Instructure Canvas in April and May, disrupting school finals and alleging large-scale student and user-data exposure.
Timeline: 20 Days
Hover over any logo to see coverage summary, click for full article.
Additional Articles
⭐⭐⭐⭐⭐
Canvas was hit by a ransomware-linked cyberattack detected May 1, disrupting classes and final exams for schools in Wisconsin while Instructure investigated potential student PII exposure.
Instructure restored Canvas after a ShinyHunters ransomware claim threatened student and teacher data exposure across U.S. schools.
Instructure notified institutions after Canvas was disabled on May 7, with ShinyHunters claiming a breach and universities rescheduling exams during the outage.
ShinyHunters claimed responsibility for a May Instructure Canvas breach while Canvas was unavailable for US universities and K-12 schools.
Instructure disclosed a ShinyHunters ransomware incident affecting Canvas after April 29 discovery, with May 7 ransom demands and May 12 agreement amid exposure of student identifiers and messages.
Instructure reported a May 7 Canvas outage tied to a claimed ShinyHunters incident, with limited data exposure and steps for affected schools across the United States and abroad.
⭐⭐⭐
Instructure said Canvas outages on May 7 and a contained May breach affected schools in Iowa after a ShinyHunters ransomware claim regarding student data exposure.
In May 2026, Instructure's Canvas learning platform was hit by ransomware, leading to student data theft and subsequent fraud-phishing warnings.
Instructure and ShinyHunters linked a Canvas ransomware attack in the United States to exposed student identifiers and finals-week access outages.
Instructure investigated a ransomware-linked Canvas incident after May 1 reporting, with Wisconsin schools notifying students and parents about possible exposure of student IDs and messages.
Clayton Muhammad reported a ransomware-driven outage of Canvas at Waubonsee Community College, where breached usernames, emails, and messages disrupted coursework.
ShinyHunters posted a ransom note on Instructure Canvas homepages in May, affecting K-12 and universities, and Instructure reported a settlement with data return and destruction logs.
Instructure took Canvas offline on Friday after ShinyHunters exploited Free-For-Teacher accounts, disrupting Maryland schools and colleges before full restoration the same day.