ARTFEED — Contemporary Art Intelligence

Canvas Ransomware Attack Paralyzes University Course Management

digital · 2026-05-12

A ransomware attack on Instructure's Canvas platform disrupted course management at Washington University in St. Louis and up to 40 percent of North American colleges during final exams. The author, a professor, describes the chaos: students panicking about project submissions, inability to access grading rubrics, and reliance on Workday as a backup communication tool. Hackers threatened to leak data of 275 million users. The outage exposed the fragility of outsourced educational software infrastructure.

Key facts

  • Canvas is used by up to 40 percent of North American colleges.
  • Washington University in St. Louis is among affected institutions.
  • Hackers targeted Instructure during college finals.
  • Threatened leak of 275 million Canvas users' personal data.
  • Hackers previously targeted Google and Ticketmaster.
  • University spent hundreds of millions on Workday ERP software.
  • Canvas outage lasted at least 24 hours with intermittent access.
  • Two-factor authentication via Duo added login complexity.

Entities

Artists

  • Don Draper (Mad Men character)

Institutions

  • Washington University in St. Louis
  • Instructure
  • Canvas
  • Workday
  • Duo
  • Google
  • Ticketmaster
  • The Atlantic

Locations

  • St. Louis
  • Plattsburgh
  • New York

Sources