How one hack turned finals week into chaos for thousands of students

A major classroom tool called Canvas crashed right when students needed it most—during finals week. Teachers use this system to post assignments, run exams, and share grades. When it vanished, everyone scrambled to find backups. The timing couldn’t have been worse. Behind the outage was a group called ShinyHunters, known for stealing data and demanding money. They left ransom messages on hundreds of Canvas login pages, claiming they had personal details for millions of students, teachers, and staff. The hackers threatened to leak the data unless schools contacted them by a set date. They even named specific schools to prove the attack was real. Canvas owners said hackers broke in through free teacher accounts, forcing an emergency shutdown. The platform stayed dark while teams worked to fix the problem. For students already stressed about tests, this added another layer of panic. Some schools delayed exams or relaxed deadlines, but the disruption was hard to ignore.Even though passwords and payment info stayed safe, hackers stole usernames, emails, student IDs, and private messages. That kind of data is gold for scammers. Imagine getting an email that mentions your actual class and professor—it would feel real enough to trick anyone. ShinyHunters isn’t new to this game. They’ve hit big companies like Ticketmaster and Rockstar before. Canvas had run-ins with them too. Last year, they broke into a different system using tricks like fake emails, but Canvas itself stayed safe then. This time, the damage was much bigger. Now that Canvas is back online, the problem isn’t solved. Hackers still hold the data, and the threat of leaks remains. But there’s a small sign of hope—the group removed Canvas from their blackmail list, suggesting talks might be happening. Still, the damage is done, and schools are left wondering how to protect students next time.