EDUCATION

Cyberattack Disrupts Canvas Across Universities, Colleges, School Districts

▪

Read, Watch or Listen

Media Bias Meter

Sources: 11

Center 100%

Sources: 11

United States — On May 7–8 the Canvas learning management system experienced a cyberattack and widespread outage that left thousands of students and staff unable to access coursework, prompting Instructure to place the platform in maintenance mode while universities and school districts disabled access, alerted users, and assessed potential data exposure. Boston and other university officials this week notified communities of operational changes: UMass Lowell delayed on-campus exams scheduled for May 8 until May 11, the University of Michigan disabled Canvas access and urged account logout, multiple Utah districts informed parents of potential compromise, and investigators and Instructure continue forensic review and communications.

Prepared by Emily Rhodes and reviewed by editorial team.

Timeline of Events

May 1: Instructure disclosed a cybersecurity incident affecting Canvas data.
May 7: Universities detected the incident and disabled Canvas access as a precaution.
May 7–8: Widespread outages prevented thousands from accessing coursework and grades.
May 8: UMass Lowell delayed on-campus exams until May 11 and adjusted services.
After May 8: Reports of ransom notes and a claim by ShinyHunters emerged; investigations continued.

Why This Matters to You

Your child's education and privacy are at stake. Cyberattacks can disrupt learning and expose sensitive data. Check with your school about their cybersecurity measures. Ensure your child's account passwords are strong and unique.

The Bottom Line

Cybersecurity is crucial in our digital age. This incident shows how a single attack can impact thousands of students and staff. Stay informed about your school's digital platforms and their security protocols. Worth forwarding if you know someone in the education sector.