Data Breach on Canvas Disrupts Thousands of Schools Nationwide

In early May 2026, the digital learning platform Canvas, developed by Instructure, experienced a significant data breach that disrupted operations at thousands of schools across the United States. Hackers operating under the name ‘ShinyHunters’ claimed to have affected over 8,800 institutions, exposing sensitive information including names, email addresses, student ID numbers, and private messages. The breach forced Canvas into maintenance mode, causing widespread chaos during critical periods such as finals and end-of-year assignments. Universities including Harvard, Columbia, Rutgers, and Georgetown, as well as multiple school districts in at least a dozen states, were impacted. In addition to the initial data theft, attackers launched a secondary campaign, defacing some schools’ Canvas login portals to demand ransom payments and threaten further data leaks if negotiations were not completed by May 12. Instructure confirmed the breach, communicated regularly through status updates, and eventually resolved the incident, restoring Canvas services for most users. This event highlights the vulnerabilities of centralized educational platforms to ransomware attacks and the significant operational impact such cyber incidents can have on the education sector.