{"id":312536,"date":"2026-05-12T21:02:28","date_gmt":"2026-05-12T21:02:28","guid":{"rendered":"https:\/\/www.newsbeep.com\/us-ca\/312536\/"},"modified":"2026-05-12T21:02:28","modified_gmt":"2026-05-12T21:02:28","slug":"canvas-owners-identify-vulnerability-exploited-by-hackers-long-beach-post-news","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us-ca\/312536\/","title":{"rendered":"Canvas owners identify vulnerability exploited by hackers \u2022 Long Beach Post News"},"content":{"rendered":"<p>This story was originally published by <a href=\"https:\/\/edsource.org\/updates\/canvas-owners-identify-vulnerability-exploited-by-hackers\" rel=\"nofollow noopener\" target=\"_blank\">EdSource<\/a>. Sign up for their <a href=\"https:\/\/edsource.org\/subscribe\" rel=\"nofollow noopener\" target=\"_blank\">daily newsletter<\/a>.<\/p>\n<p>The company that owns Canvas, the educational management system used by college and high school students and faculty throughout California, said hackers gained access to the web-based system through a vulnerability.\u00a0<\/p>\n<p>In a statement posted Monday on the CSU system website, Steve Daly, CEO of Instructure, said hackers exploited a vulnerability in the system\u2019s \u201cFree for Teacher\u201d support tickets. That area of the system has been disabled temporarily while Instructure completes a full security review.<\/p>\n<p>On Thursday the black-hat cybercrime group ShinyHunters breached Canvas, the system used by students to complete course assignments. For Thursday and most of Friday \u2014 when many final projects and exams were due \u2014 students and faculty could not access the system where all course materials and grades are stored.<\/p>\n<p>On Monday, access to Canvas was <a href=\"https:\/\/statusgator.com\/services\/canvas-instructure\/instructure\" rel=\"nofollow noopener\" target=\"_blank\">restored<\/a>. The <a href=\"https:\/\/ucnet.universityofcalifornia.edu\/employee-news\/nationwide-security-incident-involving-canvas\/\" rel=\"nofollow noopener\" target=\"_blank\">UC<\/a> and CSU systems reported that the system is available Monday morning, as did the <a href=\"https:\/\/cccsecuritycenter.org\/updates\/canvas.php\" rel=\"nofollow noopener\" target=\"_blank\">California Community College<\/a> network of campuses. Public K-12 school districts were also affected, including the San Diego Unified School District which <a href=\"https:\/\/www.sandiegounified.org\/high_school__9th_-_12th_grades__information\/notification__vendor_cybersecurity_incident\" rel=\"nofollow noopener\" target=\"_blank\">notified students<\/a> that the Canvas platform has been restored.<\/p>\n<p>Daly issued an apology for the cyberattack and for the way Instructure handled the breach.<\/p>\n<p>\u201cOver the past few days, many of you dealt with real disruption. Stress on your teams. Missed moments in the classroom. Questions you couldn\u2019t get answered. You deserved more consistent communication from us, and we didn\u2019t deliver it. I\u2019m sorry for that,\u201d Steve Daly, CEO of Instructure, wrote in a statement.<\/p>\n<p>Daly said that hackers gained unauthorized access to data fields including usernames,\u00a0 email addresses, course names, enrollment information and messages.<\/p>\n<p>\u201cCore learning data (course content, submissions, credentials) was not compromised,\u201d he wrote.\u00a0<\/p>\n<p>As a result of last week\u2019s breach, Instructure launched an <a href=\"https:\/\/www.instructure.com\/incident_update\" rel=\"nofollow noopener\" target=\"_blank\">incident update page<\/a> where a summary of their forensic report will be posted within 48 hours.\u00a0 <\/p>\n<p><img decoding=\"async\" alt=\"\" id=\"pubpixel-pixel\" src=\"https:\/\/www.newsbeep.com\/us-ca\/wp-content\/uploads\/2026\/05\/1778619748_494_pixel.png\"\/><\/p>\n","protected":false},"excerpt":{"rendered":"This story was originally published by EdSource. Sign up for their daily newsletter. The company that owns Canvas,&hellip;\n","protected":false},"author":2,"featured_media":305341,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[131,133,132],"class_list":["post-312536","post","type-post","status-publish","format-standard","has-post-thumbnail","category-long-beach","tag-long-beach","tag-long-beach-headlines","tag-long-beach-news"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts\/312536","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/comments?post=312536"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts\/312536\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/media\/305341"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/media?parent=312536"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/categories?post=312536"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/tags?post=312536"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}