National Education Platform Back Online After Brief Outage
Tens of thousands of students worldwide regained access Friday to Canvas, a widely used online learning management system, after a cyberattack temporarily knocked the platform offline during final exam periods at colleges and universities.
Instructure, the company that operates Canvas, confirmed in a statement that the system became available again for most users late Thursday following what the company described as an unauthorized security breach. The outage created widespread disruption as students preparing for final exams found themselves unable to access course materials, grades, and assignment submissions.
The company said it took Canvas offline after discovering that an unauthorized party had made changes to pages visible to students and faculty members who were logged into the system. Instructure shut down the platform to contain the breach and investigate the extent of the intrusion.
How the Breach Occurred
According to Instructure’s statement Friday, the company determined that the unauthorized access came through an exploitation of its Free-For-Teacher accounts. The company has temporarily disabled those accounts as a precautionary measure.
A cybersecurity analyst at the firm Emsisoft identified a hacking collective known as ShinyHunters as claiming responsibility for the breach. The group posted online that the attack affected nearly 9,000 schools globally and that billions of private messages and other records had been accessed.
Messages displayed on compromised Canvas accounts urged individual schools to contact the hacking group directly to negotiate settlements, threatening to leak data if schools did not comply. Instructure has not disclosed whether any ransom payment was made or provided details about what happened to compromised data.
Scramble to Manage Finals Week Chaos
The timing of the outage proved particularly disruptive, occurring as students at many institutions faced deadlines for semester-long projects and prepared for final examinations. Several universities announced schedule changes in response to the platform being unavailable.
The University of Texas at San Antonio pushed back final exams that had been scheduled for Friday. Other institutions extended assignment deadlines or sought alternative methods for students to submit work and access study materials.
Faculty members reported having to improvise solutions. One University of Texas Permian Basin professor delayed posting final grades by a day. A Wayne State University computer science instructor with 94 students said he was in the process of finalizing grades when the system went down, leaving half of the final grade calculations—tied to online assignments—in limbo.
A University of Maryland student described the scene in her creative writing class when classmates discovered the breach Thursday afternoon. The instructor attempted to restore order as students reacted to the hacking message displayed on their screens.
Educational Institutions as Cybersecurity Targets
Schools and universities have become prime targets for cybercriminals due to the large volumes of digitized personal data they maintain. Past attacks have struck major school systems including Minneapolis Public Schools and the Los Angeles Unified School District.
A security research lead at Picus Labs noted that the timing of this attack—during finals week—appeared calculated to maximize disruption and increase pressure on institutions to meet ransom demands. Educational data that once existed primarily in locked file cabinets is now stored digitally, creating new vulnerabilities for institutions that may lack robust cybersecurity infrastructure.
What Comes Next
As of Friday evening, Canvas remained operational for most users, though Instructure has not provided a timeline for restoring Free-For-Teacher accounts or disclosed the full scope of data potentially compromised in the breach. Universities continue assessing whether student and faculty information was exposed and what steps may be necessary to protect individuals whose data was accessed.
The incident raises broader questions about the security of online education platforms that have become essential infrastructure for colleges and universities nationwide. With final exam periods still underway at many institutions, schools are working to minimize further academic disruption while investigating their own exposure to the breach.