Cyberattack on Canvas Disrupts 9K Schools Worldwide

Is this proof of dangerous EdTech negligence or a security crisis that Instructure handled responsibly?
Cyberattack on Canvas Disrupts 9K Schools Worldwide
Image credit: THE WOLF OF TASI via X

The Spin


Narrative A

The Canvas ransomware attack exposed just how reckless it is to hand over education infrastructure to a single vendor. Instructure left ghost sessions active even after declaring systems secure, creating backdoors that put millions of students and staff at risk. Billion-dollar EdTech companies keep chasing flashy rebrands while neglecting the basic security that 9,000 schools worldwide were counting on.

Narrative B

The Canvas breach was serious, but Instructure moved fast — revoking access, bringing in forensic experts and notifying law enforcement. Passwords, Social Security numbers and financial data were never touched, meaning the most critical security layers held. The company has since rotated credentials, deployed platform-wide protections and is actively hardening systems to prevent future incidents.


Metaculus Prediction

© 2026 Improve the News Foundation. All rights reserved.Version 7.13.0

© 2026 Improve the News Foundation.

All rights reserved.

Version 7.13.0