Chaos begins when a cyberattack disrupts the Canvas learning platform during finals

Chaos erupted in schools and colleges across the US on Thursday as a cyber attack disrupted online learning platform Canvas as students were due to take final exams.

Canvas company training he said that as of Friday morning, the platform was back online. Instructure said it temporarily removed Canvas on Thursday after detecting unauthorized activity on its network. The same threat actor was responsible for the Instructure data breach to be revealed last week. The information obtained includes user names, email addresses, student ID numbers, and messages exchanged on the platform. The company said it had no indication that passwords, birthdays, government identification, or financial information were compromised.

Schools and colleges argue

Another ransom group known as ShinyHunters claimed responsibility for the hack on their black website. It said the data it took came from 275 million people affiliated with 8,800 schools.

As students tried to prepare for and take final exams on Thursday, the Canvas login pages showed a ransom demand. It also said that Instructure had rejected the group’s earlier demands and encouraged each school to negotiate directly with them. The post and its blackout caused chaos in schools and colleges. University of Illinois he says he delayed all the final exams and assignments he had to do on Friday, Saturday, and Sunday. University of Massachusetts Dartmouth to be repaired or additional test dates. The University of California system controlled all of its campuses words.

Canvas is not the only learning platform that could be affected by a cyberattack. Last year, PowerSchoola company that provides cloud software to 60 million students from 16,000 K–12 schools around the world, has disclosed a breach that exposed years of public information, including names, addresses, and disciplinary records.

ShinyHunters has worked for many years as a loose group. In 2024, it left data and other information from Snowflake cloud storage and used it in the breach to track Snowflake customers, including. TicketMaster.