Cyber Incident Victim: University of Technology Sydney
Date:
May 2026
Location:
Australia
Summary
The provided articles do not contain any information about an incident involving the University of Technology Sydney; therefore a summary cannot be constructed from the given sources. The reported cyber attack targeted the Canvas learning management system, claimed by the group ShinyHunters, causing widespread outages at institutions including the University of Sydney, University of British Columbia, and several US universities, leading to exam cancellations and assignment submission issues.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On Sunday the hacking group ShinyHunters began a cyber attack that targeted the Canvas learning management system owned by Instructure, causing the platform to go offline for thousands of users worldwide. By late Thursday the company reported that Canvas was available for most users, but many institutions continued to experience outages into Friday. The attack affected an estimated 9,000 universities and schools across the United States, Canada, Australia and other regions. The University of Sydney announced on Friday that Canvas was unavailable and advised students not to attempt to log in, noting that it was one of approximately 9,000 impacted institutions awaiting guidance from Instructure. Mississippi State University postponed its Friday final exams to allow students to recover lost work, while Idaho State University cancelled exams scheduled after 12:00 local time on Thursday. Penn State University told students that no one had access to Canvas, cancelled some Thursday and Friday exams, and said a resolution was unlikely within the next 24 hours.
The University of British Columbia informed students that Canvas was unavailable due to a cyber breach of Instructure and urged them to log out immediately, while the University of Toronto confirmed that multiple universities were affected by the breach. Students at the University of California Los Angeles reported difficulty submitting assignments, and the University of Chicago temporarily disabled its Canvas page after being targeted, with the Chicago Maroon publishing a screenshot of a ShinyHunters message demanding a private negotiation to avoid data release. A threat analyst from Emisoft noted that the group's threats began on Sunday with deadlines set for Thursday and 12 May, and that extortion discussions could be ongoing. On the same day, Senator Chuck Schumer sent a letter to the Trump administration urging increased cyber defences and calling for the Department of Homeland Security to assist states and localities against such risks. The source material does not contain any reference to the University of Technology Sydney, so no details about its involvement or impact in this incident can be provided. Consequently, the narrative is limited to the confirmed events and impacts described in the available articles.