As students across the country prepare for summer break, they have one last checkpoint to complete: finals week.
On May 7, when a student from the University of Pennsylvania tried to study on his Canvas account, he was suddenly logged out and unable to sign in again.
Following this report, 30 million Canvas users experienced the same technical issue when they tried to login to the platform on Thursday.
However, the simple difficulty millions of students, teachers, and staff members reported ended up becoming a bigger problem.
When a student from the University of Washington tried to login to their account and was greeted with a ransom message that read “pay or leak,” it was clear this couldn’t have been a small programming issue: it was a cyberattack.
The note signed by a notorious hacking group named, ShinyHunters, gave schools until May 12 to negotiate a compromise.
After the breach, the FBI moved to multiple states to assist the victims of the attack. On May 8, the agency recommended that students and faculty should await further instruction from their schools and not interact with anyone claiming to have their information.
On Friday morning, Instructure, the parent company of Canvas, announced that the program was restored and ready for use.
However, following the announcement, Instructure announced another message saying there was another unauthorized user who exploited Canvas’s Free-For-Teacher accounts.
As a result, Canvas removed all of their Free-For-Teacher accounts to restore the platform.
Now that Canvas is functioning normally, study sessions for finals can continue without being interrupted. Some universities have bounced-back from the outage by updating assignment deadlines and postponing finals.

































































