Northwestern University

Summary

A cyberattack on the Canvas learning management system carried out by the ShinyHunters group disrupted access for thousands of educational institutions worldwide, exposing data for hundreds of millions of users and forcing many schools to suspend online activities. Northwestern University in Evanston reported that its connection to Canvas was lost, prompting officials to work on restoring the platform and adjust academic schedules while the outage persisted. The incident highlighted vulnerabilities in the platform’s auxiliary services and prompted institutions to seek alternative ways to communicate and deliver instruction.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

In early May 2026, the ShinyHunters group carried out a cyberattack on the Canvas learning management system, disrupting service for approximately nine thousand educational institutions worldwide, including Northwestern University in Evanston, Illinois. The attack occurred during one of the busiest periods of the academic term, when institutions rely heavily on Canvas for course delivery and communication. The breach exposed data for approximately 275 million users globally. As a result of the breach, Northwestern University lost access to its Canvas environment alongside thousands of other schools.

The loss of access prevented instructors and students at Northwestern from viewing course materials, submitting assignments, reading announcements, and using the platform’s internal messaging system. The university communicated the disruption through an online message, noting that the outage interfered with normal academic activities during a critical time of the semester. The message also indicated that the impact was felt across the campus community as users attempted to carry out teaching and learning responsibilities without the LMS.

In response, Northwestern University officials stated in the same online message that they were actively working to reconnect to the Canvas service by Saturday morning. The university’s technology staff coordinated restoration efforts with the aim of restoring normal access to the platform as quickly as possible. Throughout the outage, the institution provided updates via its online channels to keep faculty, staff, and students informed of progress toward reconnection.

Sources

Sources available to members: 4 sources.