eFinder

eFinder

Home › Educational Disruption › Article

Hacked educational platform partially restored for millions of students

Al Jazeera · · 524 words · By Al Jazeera Staff; Reuters
Educational Disruption Cybercrime Syndicates Cybersecurity Breach
open_in_new Read the original article: https://www.aljazeera.com/news/2026/5/9/hacked-educational-platform-partially-re…

psychologyDetected Techniques

warning
Loaded Language 80% confidence
Using words with strong emotional connotations to influence an audience.

fact_checkFact-Check Results

15 claims extracted and verified against multiple sources including cross-references, web search, and Wikipedia.

check_circle Corroborated 6
schedule Pending 5
info Single Source 2
verified Verified By Reference 1
help Insufficient Evidence 1
check_circle
“The hacker group, ShinyHunters, threatened to leak student data after breaching the educational platform Canvas.”
CORROBORATED
Multiple sources, including Wikipedia and TechCrunch, confirm a security incident involving Canvas LMS and a data breach. ShinyHunters is identified as the group in related reports.
menu_book
wikipedia NEUTRAL — The 2026 Canvas security incident is an ongoing cybersecurity incident, outage, and data breach affecting Canvas LMS, a learning management system operated by private company Instructure. In early May…
https://en.wikipedia.org/wiki/2026_Canvas_security_incident
menu_book
wikipedia NEUTRAL — Scattered Lapsus$ Hunters, sometimes referred to as UNC6040 and UNC6395, is a cybercrime supergroup also known and referred to as "Trinity of Chaos". The supergroup is an international extortion-focus…
https://en.wikipedia.org/wiki/Scattered_Lapsus$_Hunters
menu_book
wikipedia NEUTRAL — ShinyHunters is a black-hat criminal hacker and extortion group that has been active since 2020 or earlier, and is said to have been involved in a significant number of data breaches. ShinyHunters ha…
https://en.wikipedia.org/wiki/ShinyHunters
+ 3 more evidence sources
check_circle
“ShinyHunters, a hacking group, claimed responsibility for crashing the web-based educational platform Canvas, created by tech firm Instructure.”
CORROBORATED
Al Jazeera and Cyber Intel Brief both explicitly state that ShinyHunters claimed responsibility for crashing the Canvas platform created by Instructure.
travel_explore
web search NEUTRAL — ShinyHunters, a hacking group, claimed responsibility for crashing the web-based educational platform Canvas, created by tech firm Instructure.
https://www.aljazeera.com/news/2026/5/9/hacked-educational-p…
travel_explore
web search NEUTRAL — ShinyHunters has claimed responsibility for a data breach at Instructure, the provider of the Canvas learning management system, alleging the theft of 3.65 TB of data affecting approximately 275 milli…
https://www.dataminr.com/resources/intel-brief/shinyhunters-…
travel_explore
web search NEUTRAL — Canvas Online Learning Platform Shut Down for Hours After Cyberattack. Most users regained access to the platform hours after a hacking group said it had attacked Canvas’s parent company and breached …
https://www.nytimes.com/2026/05/07/education/canvas-hacked-d…
check_circle
“The group said it had stolen 3.5 terabytes of data, including names, email addresses, student ID numbers and private messages, and threatened to release this if ransoms were not paid by May 12.”
CORROBORATED
Multiple sources confirm the group claimed to steal massive amounts of data (records/terabytes) including names and IDs, and set a deadline of May 12 for negotiation/ransom.
menu_book
wikipedia NEUTRAL — The 2026 Canvas security incident is an ongoing cybersecurity incident, outage, and data breach affecting Canvas LMS, a learning management system operated by private company Instructure. In early May…
https://en.wikipedia.org/wiki/2026_Canvas_security_incident
menu_book
wikipedia NEUTRAL — Instructure Holdings, Inc. is an educational technology company based in Salt Lake City, Utah, United States. It is the developer and publisher of Canvas, a web-based learning management system.
https://en.wikipedia.org/wiki/Instructure
menu_book
wikipedia NEUTRAL — ShinyHunters is a black-hat criminal hacker and extortion group that has been active since 2020 or earlier, and is said to have been involved in a significant number of data breaches. ShinyHunters ha…
https://en.wikipedia.org/wiki/ShinyHunters
+ 3 more evidence sources
info
“Instructure’s website said on Saturday that Canvas is now “available for most users” and no incidents were reported on Saturday.”
SINGLE SOURCE
While evidence confirms Instructure is the developer of Canvas, there is no specific evidence in the provided search results containing the exact quote or statement from Instructure regarding Saturday's availability status.
travel_explore
web search NEUTRAL — Instructure Holdings, Inc. is an educational technology company based in Salt Lake City, Utah, United States. It is the developer and publisher of Canvas, a web-based learning management system (LMS).
https://en.wikipedia.org/wiki/Instructure
travel_explore
web search NEUTRAL — Official Login page for Canvas student login, School Search Canvas, Canvas Network, Canvas Community, and Canvas Free For Teacher accounts.
https://www.instructure.com/canvas/login
travel_explore
web search NEUTRAL — Each of the 10 Maricopa Community Colleges has a college helpdesk page to assist students with Canvas questions. Visit yours for hours of operation and contact information.
https://www.maricopa.edu/students/technical-support/canvas
check_circle
“The University of Sydney reported on Saturday that Canvas had been restored but was not yet “accessible to staff or students, as we need to complete checks”.”
CORROBORATED
The claim is directly corroborated by an Al Jazeera report and a specific notification from the University of Sydney dated Saturday 9 May 2026.
menu_book
wikipedia NEUTRAL — The Australian Academy of Art was a conservative Australian government-authorised art organisation which operated for ten years between 1937 and 1946 and staged annual exhibitions. Its demise resulted…
https://en.wikipedia.org/wiki/Australian_Academy_of_Art
menu_book
wikipedia NEUTRAL — Please Don't Destroy is an American comedy group in New York City composed of Ben Marshall, John Higgins, and Martin Herlihy, who began collaborating as students at New York University. The group was …
https://en.wikipedia.org/wiki/Please_Don't_Destroy
menu_book
wikipedia NEUTRAL — The theft of The Weeping Woman from the National Gallery of Victoria took place on 2 August 1986 in Melbourne, Victoria, Australia. The stolen work was one of a series of paintings by Pablo Picasso al…
https://en.wikipedia.org/wiki/Theft_of_The_Weeping_Woman_fro…
+ 3 more evidence sources
check_circle
“Canada’s University of Alberta said Canvas was partially restored with “reduced functionality”.”
CORROBORATED
The Al Jazeera report explicitly mentions that Canada's University of Alberta stated Canvas was partially restored with 'reduced functionality'.
menu_book
wikipedia NEUTRAL — Alexan Simeon Janvier (; February 28, 1935 – July 10, 2024) was a First Nations painter in Canada. A member of the Indian Group of Seven, he helped pioneer contemporary Aboriginal art in Canada.
https://en.wikipedia.org/wiki/Alex_Janvier
menu_book
wikipedia NEUTRAL — Burman University is an independent publicly funded university located in Lacombe, Alberta, Canada. It is sponsored by the Seventh-day Adventist Church in Canada. It is a part of the Seventh-day Adven…
https://en.wikipedia.org/wiki/Burman_University
menu_book
wikipedia NEUTRAL — John Hall (born January 17, 1943) is a Canadian modernist painter from Alberta, known for his highly realistic painting style.
https://en.wikipedia.org/wiki/John_Hall_(Canadian_artist)
+ 3 more evidence sources
verified
“The countries that have been affected include the United States, the Netherlands, Sweden, Australia and the United Kingdom.”
VERIFIED BY REFERENCE
Wikipedia explicitly lists the United States, United Kingdom, Australia, Sweden, and the Netherlands as countries reporting disruptions.
travel_explore
web search NEUTRAL — Educational institutions in the United States, United Kingdom, New Zealand,[17] Australia,[18] Sweden,[19] and the Netherlands[20] reported disruptions or potential exposure of user information.
https://en.wikipedia.org/wiki/2026_Canvas_security_incident
travel_explore
web search NEUTRAL — Cyber-attack on system widely used in US education disrupts final exams. 14 hours ago. Save for later.What to know about the Canvas cyberattack that's affecting thousands of schools and universities n…
https://news.google.com/stories/CAAqNggKIjBDQklTSGpvSmMzUnZj…
travel_explore
web search NEUTRAL — The incident caused widespread outages across educational institutions in the United States, Australia and other regions, with many students unable to access assignments, lecture notes or examination …
https://www.ibtimes.co.uk/canvas-cyberattack-exposes-sensiti…
info
“According to Canvas, about 30 million people across the globe use its system.”
SINGLE SOURCE
The provided evidence confirms Canvas is widely used and affects millions, but does not provide the specific figure of '30 million people' attributed to Canvas.
travel_explore
web search NEUTRAL — Canvas system is online after a cyberattack disrupted thousands of schools.Hackers breach Canvas learning platform, exposing data on millions of students and teachers. Yesterday. Save for later.
https://news.google.com/stories/CAAqNggKIjBDQklTSGpvSmMzUnZj…
travel_explore
web search NEUTRAL — This course was developed in direct response to the needs of Canvas clients during the COVID-19 pandemic. Join this session for a quick start guide that will...
https://www.youtube.com/watch?v=ZNRRe_shC_A
travel_explore
web search NEUTRAL — Discover Canvas by Instructure, the world-leading, user-friendly LMS designed to simplify teaching and enhance student learning.Canvas The world's most-loved LMS. Mastery Standards-aligned assessments…
https://www.instructure.com/canvas
check_circle
“The breach reportedly targeted close to 9,000 institutions across the globe.”
CORROBORATED
Cyber Intel Brief and LinkedIn reports both mention the breach affecting 'nearly 9,000 institutions' or '9,000 schools and universities worldwide'.
help
“The Federal Bureau of Investigation said it was “aware of a service disruption” impacting a learning system, although it did not name Canvas, in a statement Friday.”
INSUFFICIENT EVIDENCE
No evidence was found in the provided search results regarding a statement from the FBI about a service disruption.
schedule
“The Harvard Crimson, a student newspaper, said it could not access the platform since Thursday”
PENDING
schedule
“the University of Cambridge also saying it had “temporarily suspended access” to Canvas on Friday.”
PENDING
schedule
“The Reuters news agency reported that, on May 5, the group posted a message saying Instructure had “not even bothered speaking to us” to prevent a data leak”
PENDING
schedule
“The group is a global cybercrime syndicate that was established in 2019.”
PENDING
schedule
“Over the years, they have claimed responsibility for cyberattacks, with the most recent data breach being Rockstar Games, a gaming giant that owns Grand Theft Auto.”
PENDING
info Disclaimer: This analysis is generated by AI and should be used as a starting point for critical thinking, not as definitive truth. Claims are verified against publicly available sources. Always consult the original article and additional sources for complete context.