A cyber attack disrupted academic operations at universities and schools across the United States on Thursday, as a hacking group targeted the widely-used Canvas learning management system. The incident caused widespread chaos during the high-stakes end-of-year exam period.
The company Instructure, which owns Canvas, confirmed the disruption and posted an update by late Thursday evening indicating that the platform was "available for most users." However, several major universities reported significant delays in restoring full access to their systems.
What the Left Is Saying
Senate Minority Leader Chuck Schumer of New York used the attack as a catalyst to call for increased federal cybersecurity defenses. Earlier Thursday, before the attack became public, Schumer had sent a letter to the Trump administration urging greater protection against cyber risks in an era of rapidly advancing artificial intelligence technology.
"The Department of Homeland Security must immediately help states and localities," Schumer wrote in his letter, which was shared with news outlets. "Before Americans are hit with outages, disruptions, and attacks that could put lives and livelihoods at risk."
Democratic lawmakers have generally supported increased federal funding for cybersecurity infrastructure at educational institutions. Education Week and other publications have noted that K-12 schools have become frequent targets for ransomware attacks in recent years.
What the Right Is Saying
Republicans have emphasized the role of individual institutions and states in maintaining their own cybersecurity protocols rather than relying on expanded federal programs. Conservative commentators have argued that federal agencies should focus on intelligence sharing rather than direct intervention in local school systems.
Some Republican voices have pointed to the attack as evidence that software providers like Instructure bear responsibility for building resilient systems. "Institutions paying for these platforms deserve guarantees of security," one Republican policy aide told Politico in a separate discussion about educational technology contracts.
The Trump administration has not yet issued a formal response to Schumer's letter as of publication time.
What the Numbers Show
Canvas serves thousands of educational institutions across the United States, though exact numbers of affected schools remain unclear. According to company materials, the platform is used by millions of students nationwide.
Threat analyst Luke Connolly of the cybersecurity firm Emsisoft told the Associated Press that screenshots showed ShinyHunters began issuing targeted threats on Sunday, with ransom deadlines set for Thursday and May 12. "Discussions regarding extortion payments could be ongoing," Connolly noted.
A screenshot posted by the University of Chicago's student newspaper, the Chicago Maroon, showed a message from ShinyHunters encouraging the university to contact the group privately "to negotiate a settlement" and avoid "the release of their data."
Ransomware attacks on educational institutions have increased significantly in recent years. The K-12 Cybersecurity Resource Center reported 1,619 incidents affecting public schools between 2016 and 2022.
The Bottom Line
The attack on Canvas highlights ongoing vulnerabilities in educational technology infrastructure during a period of increasing cyber threats. Students at Penn State University faced cancelled exams, while UCLA students struggled to submit assignments online through the platform.
Schumer's letter predating the attack suggests some policymakers anticipated heightened risks as AI capabilities expand. Whether Thursday's incident accelerates any legislative or administrative response remains to be seen.
Security experts note that ransomware groups frequently target institutions during vulnerable periods—end-of-semester exams represent high-stakes moments when disruption can pressure schools toward compliance. Parents and students should monitor communications from their specific institutions for updates on any potential data exposure.