Canvas hack leaves 275 million students stranded during finals

How a ransomware-style cyberattack shut down one of America’s biggest education platforms

Students across the U.S. were locked out of Canvas after hackers targeted the education platform | ©Image Credit: Unsplash / Wes Hicks
Students across the U.S. were locked out of Canvas after hackers targeted the education platform | ©Image Credit: Unsplash / Wes Hicks

If you thought your finals week was stressful, imagine your entire academic world vanishing mid-study session. That’s the reality for thousands of students after a massive cyberattack took Canvas offline at the worst possible moment.

One minute these students were studying for exams, submitting assignments, and checking lecture notes. The next? Canvas was gone.

Schools including Harvard University, Columbia University, Princeton University, and Georgetown University reported disruptions after ransom messages appeared directly on Canvas pages.

ShinyHunters, the hacking group tied to the attack, has already been linked to several major breaches over the years. According to the hackers, they had access to data connected to millions of students, teachers, and staff. Hundreds of millions of individuals connected to Canvas systems.

Finals week immediately turned into chaos

For students, this wasn’t just “the website is down.” Canvas has become the center of academic life for a huge number of schools. It is where students submit assignments, watch lecture videos, access notes and study guides, message professors, check grades, and take quizzes and exams.

So when it disappeared, entire workflows collapsed.

Add to that the fact that this happened during one of the most crucial weeks of the school year. According to students, they got locked out while actively studying for finals or trying to finish assignments. Some suddenly lost access to lecture recordings, notes, review documents, and grading systems.

A student of University of Pennsylvania told CNN the outage caused an immediate surge of fear and anxiety because critical study materials were suddenly unavailable. Another student from the Massachusetts Institute of Technology said the attack exposed how dependent schools have become on the platform.

The disruption affected some schools more than the others. For some, even areas tied to tuition billing, financial aid, and academic communication were impacted.

Some professors had to scramble to email materials manually. Other schools extended deadlines or rescheduled exams completely, including James Madison University, which pushed its Friday exams to the following week.

Canvas says systems are back online

Parent company Instructure said Canvas was restored after temporarily placing systems into maintenance mode. According to the company, an “unauthorized actor” exploited an issue connected to its Free-For-Teacher accounts.

The learning platform is now reportedly back online, though schools are still dealing with the fallout. And for some students, the stress doesn’t stop just because the login page works again.

Source: CNN