Disruption Strikes Canvas Learning Platform During Finals Due to Cyberattack

On Thursday, a major cyberattack targeted the Canvas online learning platform, leading to widespread chaos in educational institutions across the United States as students were preparing for their final exams. The platform's parent company, Instructure, announced that it had taken Canvas offline after detecting unauthorized activity within its network. This incident was linked to a previous data breach disclosed by Instructure just a week earlier, which involved unauthorized access to usernames, email addresses, student IDs, and messages shared on the platform. Fortunately, Instructure reported that there was no evidence suggesting that sensitive information such as passwords, birth dates, government IDs, or financial data was compromised. The ransomware group ShinyHunters claimed responsibility for the breach, asserting that the data stolen affected approximately 275 million individuals connected to around 8,800 educational institutions. By Friday morning, Instructure confirmed that Canvas had been restored and was operational again, but the incident raised concerns about cybersecurity in educational settings.