Schools Contact Hackers After Massive Canvas Data Breach Impacts US Education System
May 2026 | By Azad News
Several schools and universities in the United States have reportedly contacted cybercriminals following a major data breach involving the educational platform Canvas, as concerns grow over the possible release of sensitive student information.
The hacking group known as ShinyHunters claimed responsibility for the cyberattack, stating that it had stolen approximately 6.65 terabytes of data connected to nearly 9,000 educational institutions worldwide.
According to the hackers, the leaked information included student names, email addresses, identification numbers, and private communications exchanged between students, teachers, and school staff.
Canvas, a widely used online learning management system owned by Instructure, is commonly used by schools and universities for assignments, communication, grading, and educational resources.
Student newspapers and educational institutions across the country reported disruptions this week as students prepared for examinations, assignments, and end-of-year academic activities.
The FBI confirmed that it was aware of a cyber incident affecting parts of the US education system, although the agency did not directly identify Canvas by name.
Instructure announced on its support platform that it had launched an investigation into the cybersecurity incident after detecting unauthorised activity within its systems.
Company officials later confirmed that affected information included usernames, email addresses, student IDs, and messages exchanged through the platform.
The company stated that hackers exploited vulnerabilities connected to the “Free-for-Teacher” service, a feature designed for users testing parts of the platform without full institutional access.
In response, Instructure temporarily shut down the Free-for-Teacher service and restored access to the main Canvas platform after implementing security measures.
Some schools reportedly entered communication with the hackers in an effort to prevent the public release of stolen information, while authorities and cybersecurity experts continue monitoring the situation.
The incident has raised renewed concerns about cybersecurity risks facing digital education systems, especially as millions of students rely on online learning platforms for daily academic activities.
Conclusion
The large-scale Canvas cyberattack has highlighted growing vulnerabilities in online education platforms, with schools, students, and authorities now focused on protecting sensitive data and preventing further disruptions across the education sector.
This article is a rewritten summary based on publicly available information. It has been fully paraphrased for informational purposes only and does not reproduce any original copyrighted text.
