North Carolina Schools Recover from Statewide Canvas Cyberattack A ransomware attack on Instructure’s Canvas, the learning management system used by North Carolina’s public schools, disrupted operations for thousands of students and educators in early May. The incident, claimed by the ShinyHunters hacking group, led to a temporary statewide shutdown of the platform after unauthorized access was detected on April 29. The hackers initially breached Canvas through a Free-For-Teacher account, exfiltrating data tables containing student and staff names and school-assigned email addresses. A second intrusion occurred on May 7, when the attackers exploited a separate vulnerability to alter login pages, though Instructure disabled the attack within 10 minutes, preventing further data access. While the hackers claimed to have stolen data from 275 million users across nearly 9,000 schools, including private communications, officials stated that no passwords, Social Security numbers, financial information, or other sensitive personal data were compromised. The North Carolina Department of Public Instruction (NCDPI) suspended Canvas access statewide upon discovering the breach, working with cybersecurity firm CrowdStrike to assess the damage. By May 9, Instructure confirmed the system was fully restored, and NCDPI reinstated statewide connectivity on May 11 at 4 p.m. In a deal with ShinyHunters, the stolen data was returned, and duplicates were destroyed. Local districts, including Bladen County Schools, emphasized that no district-wide password resets were required but urged users to monitor accounts for potential phishing attempts, as exposed email addresses could be targeted. State Superintendent Maurice Green acknowledged the timing of the attack during final exams and graduations as particularly disruptive for students and educators. Instructure reported that no ongoing signs of compromise remained, though the incident highlighted vulnerabilities in widely used educational platforms. The breach affected over 8,000 schools and 30 million users nationwide.