Cyber Incident Victim: Northwestern University
Date:
May 2026
Location:
United States of America
Summary
The cyberattack on the Canvas learning platform disrupted services at many universities, with Northwestern University reporting efforts to restore connections while facing postponed exams and adjusted coursework. Officials worked to resume normal access as the platform’s provider noted the system remained available for most users, and a hacking group claimed responsibility for the breach that affected thousands of institutions worldwide.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
A cyberattack on the Canvas learning management system disrupted online services for thousands of universities worldwide in early May 2026. The attack was claimed by the hacking group ShinyHunters, which posted that nearly nine thousand schools were affected and that billions of private messages and other records had been accessed. At the University of Illinois at Urbana‑Champaign, the compromise prompted officials to warn users that some had seen a Canvas message containing malicious website links and other contact points that could be sources of malware or potential compromise. In response, UIUC postponed all final exams and assignments originally scheduled for Friday, Saturday and Sunday and extended the postponement to all classes, including those that did not use Canvas. Northwestern University in Evanston was identified among the local institutions affected by the Canvas outage. The university issued an online message stating that its officials were working to reconnect to the Canvas platform by Saturday morning. The broader impact forced teachers at many institutions to find work‑arounds to help students study for exams and submit final assignments, and some schools pushed back their finals schedules.
UIUC’s Technology Services reported late on Friday that they had restored a connection to Canvas in order to begin investigating whether the service could be safely returned for use by students, faculty and staff. The university said that if Canvas could be safely turned back on by 4 p.m. on Saturday, all exams originally scheduled for Friday would be administered on Sunday. If the system could not be restored safely, UIUC officials indicated they would collaborate with deans, department heads and instructors to devise alternate ways to end the semester and would share further details before noon on Sunday. Northwestern’s online message similarly noted that its staff were engaged in efforts to reestablish Canvas connectivity, though no specific timeline for restoration was provided beyond the goal of reconnection by Saturday morning. Instructure, the company that operates Canvas, stated late on Thursday that the platform was available for most users, indicating that the outage was not universal but affected a significant subset of institutions. Throughout the incident, Canvas continued to serve as the central hub for grade books, digital lectures, course materials, discussion boards and messaging between students and instructors at the universities that rely on it.