Cyberattack Disrupts Canvas Across Universities, Colleges, School Districts
Tap title to read story
United States — On May 7–8 the Canvas learning management system experienced a cyberattack and widespread outage that left thousands of students and staff unable to access coursework, prompting Instructure to place the platform in maintenance mode while universities and school districts disabled access, alerted users, and assessed potential data exposure.
Boston and other university officials this week notified communities of operational changes: UMass Lowell delayed on-campus exams scheduled for May 8 until May 11, the University of Michigan disabled Canvas access and urged account logout, multiple Utah districts informed parents of potential compromise, and investigators and Instructure continue forensic review and communications.
More context
Timeline
- 1. May 1: Instructure disclosed a cybersecurity incident affecting Canvas data.
- 2. May 7: Universities detected the incident and disabled Canvas access as a precaution.
- 3. May 7–8: Widespread outages prevented thousands from accessing coursework and grades.
- 4. May 8: UMass Lowell delayed on-campus exams until May 11 and adjusted services.
- 5. After May 8: Reports of ransom notes and a claim by ShinyHunters emerged; investigations continued.
Why it matters
Your child's education and privacy are at stake. Cyberattacks can disrupt learning and expose sensitive data. Check with your school about their cybersecurity measures. Ensure your child's account passwords are strong and unique.
Sources
JQJO Editorial Desk · Human reviewed · AI assisted. Report a correction.




