Global Disruption of Canvas Learning Platform After Major Cybersecurity Attack

May 8, 2026, 21:03

Introduction

Canvas, the cloud-based educational platform run by Instructure, suffered a major cybersecurity breach. This attack caused a service outage that affected thousands of schools and universities around the world.

Main Body

The problem started with a security weakness in the 'Free-for-Teacher' accounts, which Instructure had to disable to fix the system. A criminal group called ShinyHunters claimed they were responsible for the attack. They asserted that they stole about 6.65 terabytes of data belonging to 275 million people from nearly 9,000 institutions. Furthermore, the hackers used a 'pay-or-leak' strategy, changing the login pages to demand a ransom by May 12, 2026. This outage had a serious impact because it happened during final exams. In countries like the US, Canada, Australia, and Hong Kong, schools lost access to important materials such as gradebooks and lecture notes. Consequently, several universities, including Penn State and the University of Illinois, were forced to postpone exams or give students more time to submit their work. Instructure's investigation confirmed that usernames, emails, student IDs, and internal messages were stolen. However, the company emphasized that there was no evidence that passwords or financial information were accessed. To resolve the situation, Instructure worked with forensic experts and law enforcement agencies, such as the FBI and CISA.

Conclusion

Although Canvas services are now mostly back to normal, affected schools must remain careful about potential phishing emails and further data leaks.

Learning

⚡ The "Cause & Effect" Power-Up

At the A2 level, you probably use the word "because" for everything. To reach B2, you need to vary how you connect ideas. This article shows us how to move from basic speech to academic-style reporting.

1. The 'Result' Shift Look at this sentence: "Consequently, several universities... were forced to postpone exams."

Instead of saying: "The system broke, so the schools stopped exams," B2 students use Consequently or Therefore.

A2: This happened, so that happened.
B2: This happened; consequently, that happened.

2. The 'Addition' Upgrade Notice the word Furthermore.

A2: They stole data. Also, they asked for money.
B2: They stole data. Furthermore, they used a 'pay-or-leak' strategy.

Pro Tip: Use "Furthermore" when you want to add a point that is even more serious than the last one.

3. The 'Contrast' Anchor Check out the use of However and Although.

However acts like a speed bump. It stops the reader and changes direction: *"...stolen. However, the company emphasized..."
Although creates a balanced sentence: "Although services are back to normal, schools must remain careful."

🚀 Quick Vocabulary Bridge Stop using 'big' or 'bad'. Borrow these B2-level adjectives from the text:

Major (instead of big) $\rightarrow$ a major cybersecurity breach
Serious (instead of bad) $\rightarrow$ a serious impact
Potential (instead of maybe) $\rightarrow$ potential phishing emails

Vocabulary Learning

breach (n.)

A security breach is an unauthorized intrusion into a computer system.

Example:Canvas, the cloud-based educational platform run by Instructure, suffered a major cybersecurity breach.

outage (n.)

An outage is a period when a service is not available.

Example:This attack caused a service outage that affected thousands of schools and universities around the world.

disable (v.)

To disable means to make something inoperative or unusable.

Example:The problem started with a security weakness in the 'Free-for-Teacher' accounts, which Instructure had to disable to fix the system.

asserted (v.)

To assert means to state something confidently or claim it as true.

Example:They asserted that they stole about 6.65 terabytes of data belonging to 275 million people.

stolen (adj.)

Stolen means taken illegally by someone.

Example:They asserted that they stole about 6.65 terabytes of data belonging to 275 million people.

strategy (n.)

A strategy is a plan of action designed to achieve a particular goal.

Example:The hackers used a 'pay-or-leak' strategy, changing the login pages to demand a ransom.

ransom (n.)

A ransom is money demanded in exchange for the release of a person or property.

Example:The hackers used a 'pay-or-leak' strategy, changing the login pages to demand a ransom by May 12, 2026.

impact (n.)

Impact refers to the effect or influence that something has.

Example:This outage had a serious impact because it happened during final exams.

postpone (v.)

To postpone means to delay something to a later time.

Example:Several universities were forced to postpone exams or give students more time to submit their work.

forensic (adj.)

Forensic relates to the use of science in investigating crimes.

Example:Instructure worked with forensic experts and law enforcement agencies.

phishing (n.)

Phishing is a type of cyber attack that tricks people into revealing personal information.

Example:Affected schools must remain careful about potential phishing emails and further data leaks.

leak (n.)

A leak is an accidental release of information.

Example:Affected schools must remain careful about potential phishing emails and further data leaks.