Back it.umd.edu

according to UMD's Division of Information Technology.

it.umd.edu • May 7, 2026

Instructure, the company that owns and manages Canvas, was recently compromised. At this time, Instructure has taken Canvas offline while they investigate. This is affecting all institutions that use Canvas and at this time we have no indication there is a compromise of any systems at UMD.

At this time we do not know when Canvas will be returned to service. Instructure is providing updates at their status website:

We will update this page with more information as it becomes available.

Around 4 p.m., there was an unrelated interruption of UMD’s network caused by a configuration error of a network switch. That issue has been resolved.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Major Data Breach at Canvas Affects 275 Million Users Instructure, the company behind the Canvas learning management system, confirmed a significant data breach involving the ShinyHunters hacking group. The attackers claim to have stolen over 3.65TB of data, potentially impacting up to 275 million users, including students, teachers, and staff from nearly 9,000 institutions worldwide. The exposed information includes names, email addresses, student ID numbers, and private messages, although there is no evidence that passwords or financial data were compromised. Instructure is currently working with cybersecurity experts and law enforcement to investigate the breach and has implemented security measures, including patching vulnerabilities and increasing monitoring. The attackers have threatened to leak the data unless their demands are met, with a deadline set for May 6, 2026. The incident highlights the growing trend of cyberattacks targeting educational technology firms, which hold vast amounts of personal information. 590 sources 71

Extracted Entities

Companies (1)

Instructure