Cybercriminal Group Compromises Canvas LMS, Dozens of Universities Reschedule Finals

A cybercriminal group injected messages into Canvas, the learning management system used by thousands of universities and schools, as students navigated the platform during finals season. Dozens of universities were forced to reschedule final exams after the incident. Canvas, made by Instructure, hosts academic materials, tests, grades, and course content for millions of students. The extent of data access has not been fully disclosed. Students and faculty on Canvas-based platforms should be alert to phishing attempts that may leverage any personal data exposed in the incident.