Canvas Platform Disrupted by ShinyHunters Ransomware Attack
Instructure's widely used educational platform, Canvas, suffered a significant cybersecurity breach and ransomware-style extortion attempt by the hacker group ShinyHunters. The incident caused widespread disruption, temporarily paralyzing thousands of schools across the United States during critical final exam periods. While hackers claim over 8,800 institutions were affected, Instructure confirmed that exposed data included names, email addresses, student ID numbers, and platform messages. The attack escalated when Canvas was placed in maintenance mode, causing chaos for students and faculty. Additionally, attackers launched a secondary wave, defacing login pages at institutions like Harvard with demands for settlement negotiations by May 12 to prevent data leaks. Although Instructure initially marked the situation as resolved, subsequent service issues emerged, highlighting the vulnerability of centralized educational technology. Major universities, including Columbia, Rutgers, and Georgetown, issued alerts to their communities. This event underscores the growing threat of data extortion against higher education infrastructure, marking one of the most disruptive single-platform cyberattacks in the sector's history.
Wire timeline
Canvas Platform Disrupted by ShinyHunters Ransomware Attack
Instructure's widely used educational platform, Canvas, suffered a significant cybersecurity breach and ransomware-style extortion attempt by the hacker group ShinyHunters. The incident caused widespread disruption, temporarily paralyzing thousands of schools across the United States during critical final exam periods. While hackers claim over 8,800 institutions were affected, Instructure confirmed that exposed data included names, email addresses, student ID numbers, and platform messages. The attack escalated when Canvas was placed in maintenance mode, causing chaos for students and faculty. Additionally, attackers launched a secondary wave, defacing login pages at institutions like Harvard with demands for settlement negotiations by May 12 to prevent data leaks. Although Instructure initially marked the situation as resolved, subsequent service issues emerged, highlighting the vulnerability of centralized educational technology. Major universities, including Columbia, Rutgers, and Georgetown, issued alerts to their communities. This event underscores the growing threat of data extortion against higher education infrastructure, marking one of the most disruptive single-platform cyberattacks in the sector's history.
Slashdot