Cyber Incident Victim: Mississippi State University
Date:
May 2026
Location:
United States of America
Summary
A cyber attack claimed by the hacking group ShinyHunters disrupted the Canvas learning platform used by thousands of educational institutions, leading to widespread outages that prevented access to coursework and examinations. Mississippi State University postponed its final exams to allow students to recover lost work, while other institutions canceled or rescheduled assessments and advised users to log out of the system. Instructure, the platform’s owner, reported unauthorized activity, took the service offline, and later restored access after securing the breach, noting that personal data such as names, email addresses and student identifiers may have been exposed.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 3 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In late April, Instructure detected unauthorized activity on Canvas and immediately revoked that party's access. On Thursday, an unauthorized actor made changes to Canvas pages, forcing the education technology company to take the site offline. The hacking group ShinyHunters claimed responsibility for the attack, posting a message that urged affected institutions to negotiate a settlement and warned against the release of their data. The cyber attack affected an estimated 9,000 institutions worldwide, including universities and schools in the United States, Canada, and Australia. Among those impacted were the University of Sydney, Penn State University, Idaho State University, the University of British Columbia, the University of Toronto, the University of California Los Angeles, the University of Chicago, and Northwestern University. Canvas was reported as unavailable for most users, with some institutions continuing to experience outages into Friday.
Mississippi State University announced that it was postponing Friday's final exams to allow affected students to recover any lost work. Subsequent updates indicated that the university opted to reschedule those Friday exams for Saturday. The decision was taken because the Canvas outage prevented students from accessing course materials, submitting assignments, and preparing for their examinations. By moving the exams, the university aimed to give students additional time to recover any work that might have been lost during the disruption.
Instructure announced on Friday that Canvas had been restored after the company shut down Free-For-Teacher accounts that had been exploited in the attack. Other universities responded in various ways: Penn State canceled Thursday night and Friday exams, Boise State canceled Friday finals, UT San Antonio postponed assignments and exams to a near‑future date, and James Madison University pushed Friday morning exams to Wednesday. The widespread disruption affected end‑of‑year assessments across thousands of institutions.