Massive Cyberattack Disrupts U.S. Education Sector via Canvas LMS Breach A widespread cyberattack has disrupted universities and K-12 schools nationwide, targeting Instructure, the parent company of Canvas, a widely used learning management system (LMS). The breach has impacted millions of students and faculty, forcing institutions like the University of Illinois and Illinois State University to delay final exams and assignments. The hacking group ShinyHunters has claimed responsibility, threatening to release stolen data unless affected institutions negotiate a settlement. While highly sensitive information such as Social Security numbers and passwords appears uncompromised, exposed data includes names, email addresses, student ID numbers, and private messages, raising concerns about phishing and fraud risks. Cybersecurity experts warn that the breach could lead to targeted scams, as stolen data may be sold to third parties. The hackers have set a May 12 deadline for institutions to respond, though no resolution timeline has been provided. Multiple universities, including Northwestern and the University of Chicago, have confirmed the outage, with some temporarily disabling Canvas access. Instructure is investigating the incident, but schools remain uncertain when services will be restored. The attack highlights vulnerabilities in third-party education platforms, affecting institutions that rely on Canvas for daily coursework and communication.