Chaos erupted at schools and colleges across the US as online learning platform Canvas was hit by a cyberattack just before final exams. The threat actor, known as ShinyHunters, demanded ransom after previously breaching Instructure's network, which also affected 275 million people.
The attack left students preparing for or sitting their finals without access to essential coursework and resources. Universities scrambled to reschedule assignments and delay exam deadlines. The University of Illinois postponed all final exams, while the University of Massachusetts Dartmouth extended due dates.
Canvas isn't alone in experiencing cyberattacks; last year saw PowerSchool, which serves 60 million students worldwide, fall victim to a breach that exposed sensitive data including names, addresses, and disciplinary records. ShinyHunters has been active for years, making off with credentials from cloud storage provider Snowflake before using them in follow-on breaches.
The incident highlights the ongoing struggle educational institutions face against cyber threats as they increasingly rely on digital tools for teaching and assessment. The disruption comes at a particularly stressful time for students who are just days away from their final exams, adding an unwelcome layer of complexity to the already fraught environment of exam season.







