An apparent cyberattack involving the Canvas online learning platform disrupts schools and colleges across the United States after hackers allegedly carried out a data extortion campaign. Multiple reports say a hacking group claims it has accessed data tied to more than 275 million people associated with roughly 9,000 educational institutions, including students and faculty. The attackers reportedly deface Canvas’s login page and display a ransom demand, warning that they will leak the threatened data. In response to the incident, Canvas’s operators disable the service, which halts access for districts and universities relying on the platform for classes, assignments, and coursework.

While accounts agree on the alleged scale of the data and the presence of a ransom demand on the login page, details about the exact scope of data compromised, the specific data types, and the extent to which systems were breached beyond the platform’s access are not fully established in the reports. The disruption continues as organizations work through the fallout and assess the incident.