United States ransomware attack cripples Canvas platform
PUBLISHED May 9, 2026, 2:14 PM ET
Read, Watch or Listen
A major ransomware breach has struck the Canvas learning management system, disrupting digital services at more than 3,500 educational institutions across North America, including the University of California system. The hacking group ShinyHunters has claimed responsibility, alleging it targeted Canvas owner Instructure after the company tried to apply security fixes without negotiating. The attackers say they stole data on an estimated 275 million users, including names, emails, student identification numbers, and private messages, but not payment data or passwords. As of early May, many students remain locked out during spring finals, forcing some universities to postpone exams and review security measures.
By Shahbaz A. | JQJO News
Timeline of Events
- 2024 ShinyHunters linked to Ticketmaster breach
- Early May Attack paralyzes Canvas learning infrastructure
- Early May Instructure begins partial system restoration
- Early May Universities postpone final examinations indefinitely
- Early May Officials confirm 275 million users affected
- Early May Hackers threaten to leak stolen database
- May 12 ShinyHunters deadline set for data release
News Intelligence
- This attack affects your privacy. If you're a Canvas user, your personal data might be at risk. Check your account for suspicious activity. Alert your school or workplace if you notice anything odd.
Comments