CHICAGO (WLS) — Universities and schools K-12 across the country, including the University of Illinois and Illinois State University, have been impacted by a massive data breach targeting a system widely used by students and faculty.<\/p>\n
The breach involves Instructure, the parent company of Canvas, a web-based learning management system used daily by educators and students for coursework, assignments and communication. Thousands of institutions and millions of users have reportedly been affected.<\/p>\n
University of Illinois has postponed final exams and assignments for Friday, Saturday and Sunday, the school announced late Thursday<\/a>.<\/p>\n ABC7 Chicago is now streaming 24\/7. Click here to watch<\/a><\/p>\n Millions of users are seeing a message from the hackers, calling themselves “ShinyHunters.” The hackers are threatening to expose the information they’ve stolen unless a settlement is negotiated with each institution.<\/p>\n “The one thing that stands out with this attack is its sector-wide. We have a vendor that’s used by almost the majority of education institutions around the country,” said Rob D’Ovidio, an associate professor in Drexel University’s Department of Criminology.<\/p>\n While experts say highly sensitive personal information such as Social Security numbers, passwords and usernames has not been compromised. Other data has been exposed, including names, email addresses, messages and student ID numbers.<\/p>\n Still, students remain a prime target for scammers who may use the information obtained in the breach to launch phishing attacks or other fraudulent schemes.<\/p>\n “If I was a Canvas user at an institution that was compromised, I’d be on the lookout for phishing attacks,” D’Ovidio said.<\/p>\n Experts believe the group behind the breach may not use the data directly but could sell it to others, increasing the likelihood of targeted scams.<\/p>\n “Once they get this basic information, name, student ID, email, you become an increased risk you’ll be targeted,” D’Ovidio said.<\/p>\n The group responsible for the breach is reportedly demanding a large payout from affected institutions and is threatening to release the data if payment is not made. Experts recommend against paying such demands and instead advise affected users to monitor their accounts closely and be cautious of suspicious emails or messages.<\/p>\n As school institutions assess the extent of the breach, officials and cybersecurity experts continue to urge caution among students and staff who rely on the platform every day.<\/p>\n The hackers are giving schools until the end of next Tuesday, May 12, to respond.<\/p>\n So far, leadership at the schools are telling users there’s no timespan on when the cyber-attack could be resolved.<\/p>\n The University of Illinois said, “Canvas, our learning management system, is offline due to an ongoing cybersecurity incident. We are awaiting information from Instructure, the parent company of Canvas, as to when the service will become available again. Until the vendor can solve this problem, course materials will be unavailable. This issue is affecting universities across the country. Members of university leadership are discussing next steps, with sensitivity to the impacts on students and instructors during the final exam period. For status updates, please visit go.illinois.edu\/2026-canvas-incident<\/a>.”<\/p>\n Illinois State University said, “The Canvas learning management system is currently experiencing an unexpected outage affecting universities nationwide, including Illinois State University. At this time, the cause of the outage and an estimated time to resolution are not known. We are monitoring the vendor’s communications and keeping our campus community updated.”<\/p>\n Northwestern University said, “Northwestern IT continues to monitor the issue affecting Canvas. The vendor is aware and investigating the issue. We can also confirm that other institutions are experiencing the same impact.”<\/p>\n The University of Chicago said, “Instructure, the provider of Canvas, has publicly disclosed a cybersecurity incident affecting their environment. The University of Chicago has no evidence of unauthorized activity affecting UChicago Canvas accounts at this time. However, we have temporarily disabled the Canvas Login until the service is available again.”<\/p>\n 6abc Philadelphia contributed to this report.<\/p>\n Copyright \u00a9 2026 WLS-TV. All Rights Reserved.<\/p>\n","protected":false},"excerpt":{"rendered":"CHICAGO (WLS) — Universities and schools K-12 across the country, including the University of Illinois and Illinois State…\n","protected":false},"author":3,"featured_media":781207,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5124],"tags":[319687,319684,319681,319682,319686,319683,960,5386,1818,319685],"class_list":{"0":"post-781206","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-chicago","8":"tag-319687","9":"tag-canvas-data-breach","10":"tag-canvas-hacked","11":"tag-canvas-hacker","12":"tag-canvas-news","13":"tag-canvas-outage","14":"tag-chicago","15":"tag-il","16":"tag-illinois","17":"tag-is-canvas-down"},"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@us\/116537139402391528","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts\/781206","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/comments?post=781206"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts\/781206\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/media\/781207"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/media?parent=781206"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/categories?post=781206"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/tags?post=781206"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}