Canvas

Profile narrative

Canvas provides a learning management system (LMS) used by educational institutions to deliver courses, manage assignments, facilitate communication, and support online learning. It offers a Free-For-Teacher tier that allows educators to create and host courses without cost, contributing to its adoption in K-12 and higher education settings worldwide. The platform is headquartered in the United States of America and serves a global market of schools, colleges, and universities.

The breach reported in April 2026 indicated that Canvas serves thousands of schools worldwide and that the incident affected hundreds of millions of users, illustrating its extensive reach. The intrusion was first detected through suspicious activity linked to Free-For-Teacher accounts, prompting the platform to be taken offline multiple times to contain the breach. Distinguishing attributes include its specialization in education technology, the availability of a free tier for individual instructors, and its role as a central hub for coursework, exams, and communications. Structural notes: no explicit ownership or parent/subsidiary information is provided in the source material. The April 2026 intrusion by ShinyHunters accessed names, email addresses, student identification numbers, and private messages, but no evidence emerged that passwords, Social Security numbers, or financial data were compromised. The attackers threatened to leak the stolen information unless their demands were met, prompting multiple temporary takedowns of the platform to contain the breach. During the outage, many educational institutions experienced disruptions to coursework, exams and communications, with some temporarily disabling access while investigations continued.

Incidents

1 incident linked to this organisation.