Hackers Paralyse Global Classrooms via Canvas
A coordinated cyber attack has crippled thousands of schools and universities across the West. The hacking group ShinyHunters claims it breached Instructure, the parent company of the ubiquitous learning platform Canvas. Over 9,000 institutions in the United States, Canada, and Australia lost access to coursework and examinations this week. Many universities remain offline as they face ransom demands to prevent the leak of sensitive student data. This breach hits at a critical moment in the academic calendar.
The timing is a calculated move to maximise leverage. Students at the University of Sydney and Penn State found themselves locked out of vital systems during finals week. Penn State took the rare step of cancelling scheduled exams as a resolution seemed unlikely within a day. The University of British Columbia warned its students to log out immediately following the breach. These institutions now wait for Instructure to secure its digital perimeter. Most users gained partial access by late Thursday, but the damage to the semester remains.
ShinyHunters is not merely looking to cause chaos. Evidence suggests a classic extortion play is underway. The University of Chicago disabled its portal after receiving a direct message from the group. Screenshots show the hackers offering a private settlement to avoid a public data dump. Threat analysts believe the group set strict deadlines to force quick payments. Negotiations are likely happening behind closed doors as universities weigh the cost of silence against the risk to student privacy.
The attack highlights the fragility of the educational supply chain. Thousands of schools rely on a single software provider for their daily operations. When that provider falls, the entire system grinds to a halt. The University of Toronto and UCLA reported similar struggles with assignment submissions and grading. It is a stark reminder that digital centralisation creates easy targets for sophisticated criminals. One successful breach can now disrupt learning on three different continents simultaneously.
Political pressure is mounting in Washington as the outages persist. Senate Democrat Chuck Schumer has urged the Trump administration to bolster defences against such risks. He argues that the Department of Homeland Security must do more to protect local infrastructure. The rapid rise of artificial intelligence has given hackers new tools to find and exploit weaknesses. Schumer warns that these disruptions put lives and livelihoods at risk. The current crisis proves that schools are no longer safe havens from global cyber warfare.
Instructure claims that its systems are returning to normal for most users. However, many major universities still report significant outages on their own websites. The recovery process will be slow and expensive for the affected institutions. They must now audit their data to see what the hackers actually took. For millions of students, the end-of-year stress now includes the fear of their personal details ending up on the dark web. The hackers have proven that a school’s most valuable asset is its data.