Skip to content

Multiple universities forced to reschedule final exams after Canvas cyber incident

On Thursday, dozens of students took to social media to say they saw a message from a cybercriminal group as they navigated through Canvas, an educational platform created by Instructure that hosts teaching materials, tests, readings and more.

Universities across the U.S. were forced to delay final exams this week following a cyberattack on a popular education software provider.

On Thursday, dozens of students took to social media to say they saw a message from a cybercriminal group as they navigated through Canvas, an educational platform created by Instructure that hosts teaching materials, tests, readings and more. 

The message, from the ShinyHunters cybercriminal gang, said they breached Instructure "again" after the company did not negotiate a ransom following a breach last week. The note urged schools to reach out to the hackers directly to negotiate a ransom by May 12. 

Source: https://therecord.media/universities-forced-to-reschedule-exams-canvas-incident

Related breach coverage

  • Educational tech firm Instructure data breach may have impacted 9,000 schools
    2026-05-05

    Instructure, maker of the Canvas learning platform, is investigating a cyber incident that exposed users’ personal data. Instructure is a U.S.-based educational technology company best known for developing Canvas, one of the world’s most widely used learning management systems (LMS).  The U.S. firm confirrmed a cybersecurity incident that exposed users’ personal information. The company is working with external […]

  • Cyberattack Hits Canvas System Used by Thousands of Schools as Finals Loom
    2026-05-08

    A system that thousands of schools and universities use went offline due to a cyberattack, creating chaos as students tried to study for finals. The post Cyberattack Hits Canvas System Used by Thousands of Schools as Finals Loom appeared first on SecurityWeek.

  • Educational company Infrastructure reports cyber incident
    2026-05-04

    By Saturday, Infrastructure’s chief information security officer Steve Proud confirmed that the hackers gained access to information about users at some educational institutions, including names, email addresses, student ID numbers and messages between users.

  • Ransomware group claims breach of pro-Orbán Hungarian media firm
    2026-05-04

    Mediaworks confirmed the incident on Friday, warning that “a significant amount of illegally obtained data may have come into the possession of unauthorized persons."