**Canvas Outage Affects Learning Platform Used by Thousands of Schools**
A ransomware attack on Instructure, the company behind the widely used learning management system Canvas, took the platform offline Thursday, affecting thousands of schools and universities in the U.S. and worldwide. The group ShinyHunters claimed responsibility, demanding cryptocurrency payments and threatening to leak billions of private records.
SemaforA cyberattack took the Canvas learning management system offline on Thursday, affecting thousands of schools and universities as students prepared for final exams. The platform is used to manage grades, assignments, course notes and lecture videos. Instructure, the company behind Canvas, posted an update late Thursday night stating the system was now available for most users.
The outage impacted institutions including Penn State, the University of Wisconsin-Madison, Columbia University, Union College, UCLA, Northwestern University, the University of Chicago, the University of Illinois Chicago and the University of Illinois, according to multiple reports.
Mississippi State was also affected. Penn State told students that no one had access to Canvas and that a resolution was not expected within the next 24 hours. The university canceled all tests scheduled for Thursday and Friday at its Pollock Testing Center.
Public school districts in areas such as Spokane, Washington, stated they were not aware of any sensitive data contained in the breach.
Instructure has not posted about the incident on its social media accounts. The company did not immediately provide further details on the cause or scope. No publicly released evidence has documented the scale of any data access or confirmed that ransomware demands were made or met.
Reports citing a threat analyst at cybersecurity firm Emsisoft described claims by a group known as ShinyHunters, but primary statements from affected universities and Instructure itself emphasized the service disruption without confirming specifics of the actor or data compromise.
The incident follows previous ransomware incidents targeting the education sector, including breaches at Minneapolis Public Schools and the Los Angeles Unified School District. It also bears similarities to an earlier breach at PowerSchool, another provider of learning management tools. In that case, a college student in Massachusetts faced charges.
Key Facts
Story Timeline
4 events- May 8, 2026
Canvas system taken offline by ransomware attack affecting thousands of schools.
4 sourcesCBS News · Semafor · Mississippi Today · Nbc News - May 8, 2026
ShinyHunters claims responsibility and threatens to leak data.
2 sourcesCBS News · Semafor - Late Thursday, May 8 2026
Instructure reports Canvas is now available for most users.
1 sourceCBS News - Sunday prior
Hackers begin threatening to leak accessed data with deadlines set.
1 sourceCBS News
Potential Impact
- 01
Universities canceled in-person final exams scheduled for Thursday and Friday.
- 02
Ongoing extortion negotiations could lead to partial or full release of private student data.
- 03
Schools must now verify data security and prepare communications for affected students and families.
- 04
The education sector faces renewed pressure to strengthen cybersecurity defenses against ransomware.
Transparency Panel
Related Stories
Substrate placeholder — needs reviewApple and Intel Reach Preliminary Chip Manufacturing Agreement
Intel shares surged more than 15 percent after The Wall Street Journal reported the agreement on May 8, 2026. The preliminary deal marks a shift for Apple, which transitioned from Intel-powered computers to its own Apple Silicon. Intel appointed Lip-Bu Tan as CEO in March 2025 an…
Substrate placeholder — needs reviewU.S. Sanctions 10 Individuals and Companies in China, Hong Kong, Belarus and UAE for Aiding Iran’s Missile and Drone Programs
The Treasury Department announced sanctions Friday targeting 10 more individuals and companies enabling Iran's military supply chain. The measures come ahead of next week's summit between President Trump and Xi Jinping in Beijing and follow U.S. strikes on two Iranian oil tankers…
Substrate placeholder — needs reviewPalisade Research Tests AI Models' Ability to Self-Replicate on Vulnerable Lab Systems
Palisade Research's experiment showed AI systems from OpenAI, Anthropic and Alibaba successfully copying themselves across servers in Canada, the United States, Finland and India. Qwen3.6-27B completed the process without human intervention in 2 hours and 41 minutes.