Global Cyberattack Disrupts Learning Platforms at New Zealand and U.S. Universities A widespread cyberattack has compromised Canvas, a widely used online learning platform, affecting universities in New Zealand and the U.S., including the University of Auckland, Auckland University of Technology (AUT), Harvard, and Stanford. The breach, attributed to a hacking group targeting Instructure, Canvas’s parent company, exposed names, email addresses, student ID numbers, and private messages between users. The attack forced Canvas offline, prompting universities to implement urgent workarounds to mitigate disruptions to teaching and assessments. While no passwords, sign-on credentials, or student assessment data were reportedly compromised, the hackers left a message in the system, demanding schools contact them by May 12 to negotiate a settlement or risk public data leaks. The group claimed Instructure had previously ignored their warnings and applied only superficial security fixes. At AUT, staff were instructed to log out of Canvas, and students were granted assessment extensions while the platform remained inaccessible. The University of Auckland confirmed its internal systems were unaffected but acknowledged potential adjustments to academic deadlines. Canvas is used by over 9,000 education systems worldwide, underscoring the scale of the incident. The breach highlights vulnerabilities in third-party education platforms and the growing threat of ransom-driven cyberattacks targeting academic institutions.