International Cyber Attack Disrupts Universities and Schools
Tuesday, 2026/05/12221 words3 minutes702 reads
An orchestrated cyber attack attributed to the notorious hacking collective ShinyHunters has compromised the Canvas learning management system, affecting an estimated 9,000 educational institutions across the United States, Canada, and Australia. The breach occurred during the high-stakes end-of-semester examination period, amplifying its disruptive impact on academic operations.
The attack manifested through ransom notes demanding bitcoin payments, threatening to release stolen institutional data unless demands were met. At Mississippi State University, meteorology student Aubrey Palmer recounted the moment a ransom message materialized on screens mid-examination, initially mistaking it for a personal security breach before recognizing the systemic nature of the incident. The university subsequently postponed examinations, while institutions including Penn State, the University of Sydney, and the University of British Columbia implemented emergency protocols ranging from exam cancellations to complete platform shutdowns.
Instructure, Canvas's parent company, reported partial service restoration by Thursday evening, though several institutions continued experiencing outages. Luke Connolly, a threat analyst at Emisoft, indicated that extortion negotiations may be ongoing, with deadlines extending into May. ShinyHunters, previously linked to economically damaging breaches including last year's Jaguar Land Rover hack, has not disclosed its intentions regarding the allegedly exfiltrated data.
The incident coincided with Senate Majority Leader Chuck Schumer's appeal to the Trump administration for enhanced cybersecurity defenses, particularly concerning AI-related vulnerabilities, underscoring the escalating threat landscape facing critical infrastructure.
