A ransomware attack hit the Canvas learning platform on Thursday, forcing schools and colleges across the US to postpone or reschedule final exams. The disruption came just as students prepared for year-end testing.
Instructure, the parent company of Canvas, took the platform offline after detecting unauthorized activity in its network. The same threat actor had carried out a data breach disclosed the previous week. Accessed data included usernames, email addresses, student ID numbers, and platform messages, though the company reported no evidence that passwords or financial details were involved.