Canvas cyberattack disrupts schools during finals

The Canvas cyberattack disrupted schools and universities nationwide during final exam season, leaving students unable to access assignments, grades and course materials. The incident has also raised data breach fears after ShinyHunters claimed it stole Canvas user information.

What happened to Canvas?

Canvas, the learning platform run by Instructure, was taken offline for many users after reports of hacked login pages and service disruptions. Students at multiple colleges said they were redirected to a message allegedly posted by ShinyHunters, a hacking group that threatened to leak school data if its demands were not met.

The timing intensified the fallout. With finals underway, some students lost access to exam materials, lecture notes and submission portals, forcing schools to adjust deadlines, monitor systems and guide users through temporary workarounds.

Which schools were affected?

The disruption touched schools across the U.S., including districts and colleges in North Texas. Plano ISD, Allen ISD, Southern Methodist University and Tarrant County College were among institutions reviewing the impact as Canvas access began returning.

What student data may be at risk?

Instructure has said it is investigating the security incident. Reports indicate the exposed information may include names, email addresses, student ID numbers and messages, though the full scope has not been independently confirmed.

Cybersecurity experts warn that education platforms remain high-value targets because they store data on minors, teachers and university communities. For students and families, the immediate advice is simple: watch for suspicious emails, avoid unknown links and follow official school updates while the investigation continues.