Canvas data breach hits Southern California schools during finals week

A massive cybersecurity breach targeting Canvas, a learning management system used at universities and schools across the country, disrupted classes at University of California and California State University campuses throughout Southern California as students face final exams, ABC7 Los Angeles reported Thursday.

The attack, claimed by extortion group Shiny Hunters, which says it stole more than 275 million records, threatens to expose billions of private messages between students and teachers unless a ransom is paid by May 12 — a deadline falling squarely in finals season for Southern California campuses.

Instructure, the company that operates Canvas, reported the cybersecurity incident over the weekend and placed Canvas, Canvas Beta and Canvas Test in maintenance mode by Thursday, according to ABC7 Los Angeles. Universities and community colleges began working to move coursework to alternative platforms as the investigation continued.

The disruption struck students at one of the most critical points in the academic calendar. Alfonso Vargas, a student at Cal State Northridge, said the timing could not be worse. "Frankly, it's coming at the worst time possible. It's during finals week. Teachers are finding out right now. I'm a little worried whether they extend the deadline or not, because I have a term paper due," Vargas said.

Shiny Hunters, a criminal extortion group, claimed responsibility for the attack, saying it stole more than 275 million records. The group threatened to release billions of private messages exchanged between students and teachers if a ransom is not paid by May 12, ABC7 Los Angeles reported.

At Glendale Community College, President Ryan Cornner said the campus has contingency plans ready. "We actually do have some backups that are going to support these efforts. I don't think that's common across all institutions, and I expect that will be an ongoing conversation," Cornner told Eyewitness News.

Schools across Southern California are scrambling to notify students and faculty while shifting coursework off the Canvas platform. The breach comes as students at affected campuses race to meet final assignment deadlines.

Campuses across Southern California are racing to restore access to course materials and support students facing imminent deadlines. The extortion group's May 12 ransom deadline and the full extent of the breach remain under active investigation.