A sweeping cyberattack on the popular Canvas learning management platform disrupted finals week across Texas and exposed the growing vulnerability of digital education systems nationwide. The outage, which began Thursday, May 7, affected colleges, universities, and school districts that rely on Canvas for coursework, exams, grades, and communication.
Canvas, owned by Instructure, is one of the most widely used educational platforms in the country. The cloud-based system supports more than 30 million active users and is utilized by roughly 41 percent of higher education institutions in the United States. During the attack, students and faculty attempting to log in were instead met with a ransom message claiming responsibility for the breach.
According to university officials and cybersecurity analysts, the hacker group ShinyHunters took credit for the intrusion. The group allegedly accessed vulnerable “Free for Teacher” accounts within Canvas and claimed to have compromised thousands of schools worldwide. Reports indicate the attackers may have obtained names, email addresses, student ID numbers, and private communications stored within the platform.
The disruption hit Texas schools at one of the worst possible times. Baylor University delayed final exams after losing access to Canvas, leaving administrators uncertain about how long systems would remain unavailable. Officials later confirmed that Instructure hired a forensic investigation firm to examine the breach and determine the scope of the damage.
At The University of Texas at San Antonio, finals scheduled through Friday were postponed while university staff worked to restore access to course materials and online tools. Students were advised to clear browser cookies and caches once portions of the system returned online. Other institutions, including Southern Methodist University, also rescheduled exams due to the outage.
The attack extended beyond higher education. School districts including Plano Independent School District and Allen Independent School District reportedly experienced disruptions tied to the breach.
The incident has renewed attention on cybersecurity preparedness in Texas. Last year, Greg Abbott signed House Bill 150 into law, creating the Texas Cyber Command. The new state-backed initiative received a $135 million investment to strengthen cyber threat intelligence and help identify vulnerabilities across state and local systems.
