Back to Industry

Industry - Data Breach

moderateAnti-Privacy → Data Breach

Executive Summary

Canvas, an educational platform used by thousands of universities, suffered a ransomware attack that locked out students and teachers and resulted in stolen personal data. Although the parent company Instructure paid the ransom for system recovery and data deletion, a former White House cyber official warns the stolen information may still be circulating and could be used to target young people. Experts note the attack involved AI technology and represents a growing threat, as many ransomware...

What Happened

Canvas, an educational platform used by thousands of universities, experienced a ransomware attack in May 2026 that locked students and teachers out of the system and resulted in the theft of personal data. The parent company Instructure paid the ransom to restore system access and secure a promise from the attackers to delete the stolen information. According to a former White House cyber official, the attack involved the use of artificial intelligence technology.

Who Is Affected

Students and teachers at thousands of universities across the United States that use the Canvas platform are affected, with their personal information potentially compromised. Young people are considered particularly vulnerable, as they represent one of the fastest-growing groups targeted by online scams. The attack delayed finals and prevented users from accessing critical educational resources during the incident.

Why It Matters

This attack highlights the increasing threat of AI-enabled ransomware attacks on educational institutions, which experts warn are becoming more frequent and easier to execute. Despite the ransom payment and deletion promise, former White House officials caution that stolen personal data may still be circulating and could be used to target vulnerable young users. The incident underscores a broader pattern of underreported cyberattacks where organizations quietly pay ransoms, with experts estimating reported cases represent only a fraction of actual attacks occurring.

What You Should Do

Contact your school's IT department directly to verify the legitimacy of any emails claiming to be from Canvas before opening them or clicking links. Enable multifactor authentication on your Canvas account if the option is available. Only access Canvas by typing the website address directly into your browser rather than clicking email links, to reduce the risk of phishing attempts using the stolen data.

Summary generated from verified sources and reviewed before publication. How we summarize.

Sources

Related Events

Canvas, an educational platform used by thousands of universities, suffered a... - Industry | PrivacyWire