The cyberattack of the online learning system used by thousands of schools and millions of students across the United States was one of the largest cyberattacks in education. The outage to Instructure's Canvas learning management system occurred in early May 2026, just days before final exams. And it was the only school system affected at the time. With the education sector in crisis, the ShinyHunters hacker group came forward claiming to have data from more than 9,000 educational institutions. These compromised organizations ranged from Harvard to the Georgia public school districts as well as K-12 schools in the U.S. and around the world.
Panic set in among Canvas users as they were prevented from accessing their course materials. The hackers proceeded to make ransom demands to the 275 million users of Canvas. "If you want to get back access to all of your data (including finals and other exams), pay the price", the hackers stated. "The price will increase over time. May 12 is the last day we will give you the chance to retrieve your data." The ShinyHunters demanded ransom demands from each of the affected institutions by May 12. Are your users prepared for the next cyber attack?
The crisis led to a mad scramble as students and professors tried to find alternative ways to complete final exams. In some instances, those impacted were forced to take finals on paper. The Canvas catastrophe was a chilling lesson for the dangers of putting so many eggs into the cloud and the consequences of neglecting cybersecurity.
The good news, according to Instructure, is that no financial information, such as passwords or Social Security numbers, were compromised. The bad news, however, was that names, email addresses and other personal details had been exposed and were potentially exposed given that Instructure had sent billions of internal messages during the previous year.
According to one cybersecurity expert, the latest cyber attack is a wake-up call for our whole education system.
Canvas has now confirmed that nearly all functionality has been restored as of May 8th. But experts warn that without a system-wide effort to bolster defenses, we're likely to see more breaches. Next time, they say, the damage could be catastrophic.