Instructure confirmed Canvas disruptions tied to a second ShinyHunters-linked incident within days, forcing colleges to pause systems and revise final-exam schedules. As institutions closed the gap with grace periods, some—such as Pennsylvania State University—canceled tests administered during the outage window. Instructure said Canvas is back online and “safe to use,” while also temporarily disabling affected Free-For-Teacher accounts. The company previously disclosed that the threat actor exploited those accounts to access personal information including names, emails, and student IDs, and later made unauthorized changes to pages viewed by logged-in users. The latest incident underlined how LMS downtime translates into immediate academic workflow disruption: students lost access to course materials and teachers created workaround plans for assignments and submissions. The pattern also heightens long-running institutional concerns about vendor concentration and recovery timelines during critical academic periods.
Get the Daily Brief