Now Hacked
EN
Data breach

Canvas learning platform hack causes data leak and exam disruption

First reported · Last reported · 184 related reports

A hack of Canvas, the learning platform run by Instructure, led to a data leak and service outages at many US schools. During May final exams, students were unable to complete their tests, and Boise State University canceled some finals. Instructure said the hackers returned the data after extortion over the stolen information.

Key facts

Affected organization
Instructure
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Leak of student and staff data and disruption of classes and exams at many US schools
Cause / method
Data theft through a hack and demand for money
Location
United States

If your data was exposed

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.

Timeline

  1. Instructure confirmed a data breach at Canvas.
  2. Boise State University reported Canvas outages linked to a wide-ranging data leak.
  3. The Canvas cyberattack disrupted service access and final exams at many US universities.
  4. Boise State University canceled Friday finals after the Canvas cyberattack.
  5. Instructure said the hackers had returned the Canvas data they stole.
  6. It emerged that information on students and staff of the Goshen County school district was also affected by the leak.

Also affected by this incident

184 related reports

  • Data breachInstructureKnock-on victims: 2

    Instructure Canvas hack leaks student and teacher data

    275MImpact: Data on 275 million users at about 8,800 schools and universities, according to the attackers

    Education technology company Instructure confirmed a data breach related to its Canvas platform. ShinyHunters claimed to have stolen data on 275 million users at about 8,800 schools and universities, and school login pages were defaced and services disrupted. The company reached an agreement with the attackers to prevent the data from being released, and US lawmakers demanded an explanation from the company.

    Related reports: 36 · last report →

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.