{"id":285662,"date":"2026-05-09T09:25:21","date_gmt":"2026-05-09T09:25:21","guid":{"rendered":"https:\/\/www.newsbeep.com\/us-tx\/285662\/"},"modified":"2026-05-09T09:25:21","modified_gmt":"2026-05-09T09:25:21","slug":"canvas-restored-after-cyber-attack-affects-thousands-of-schools-across-texas-during-finals","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us-tx\/285662\/","title":{"rendered":"Canvas restored after cyber-attack affects thousands of schools across Texas during finals"},"content":{"rendered":"<p class=\"text | article-text\">TYLER, Texas (KLTV) &#8211; A cyberattack caused chaos for students at thousands of schools as they study and take finals before being restored Friday norning.<\/p>\n<p class=\"text | article-text\">Canvas is a popular, cloud-based digital hub for classrooms. An expert says the hacking group \u201cShiny-Hunters\u201d posted online that nearly 9,000 schools worldwide were affected, with billions of private messages and other records accessed.<\/p>\n<p class=\"text | article-text\">Students and teachers reported being locked out of their Canvas courses. Anyone trying to open the system brings up a notice that the system is under scheduled maintenance.<\/p>\n<p class=\"text | article-text\">Instructure, the parent company of Canvas, says the platform has been fully restored. <\/p>\n<p class=\"text | article-text\">\u201cCanvas is fully back online and available for use. Our external forensic partner has reviewed the known indicators and found no evidence that the threat actor currently has access to the platform, the company <a href=\"https:\/\/www.instructure.com\/incident_update\" target=\"_blank\" rel=\"noreferrer nofollow noopener\" title=\"https:\/\/www.instructure.com\/incident_update\">said on their website<\/a>. <\/p>\n<p class=\"text | article-text\">\u201cWe\u2019ve identified the underlying issue tied to Free-For-Teacher accounts and temporarily shut those accounts down to remove the access path the actor used. We\u2019ve also revoked privileged credentials and access tokens tied to affected systems, deployed additional platform protections, rotated internal keys, restricted token creation pathways, and added monitoring across our platforms. We will continue to monitor the situation closely.\u201d<\/p>\n<p class=\"text | article-text\">They also said the FBI, the U.S. Cybersecurity and Infrastructure Security Agency (CISA), and other agencies have been notified. <\/p>\n<p class=\"text | article-text\">Tyler ISD said while they were previously unable to access the system, Canvas is now fully back online as of around 10:30 a.m.<\/p>\n<p class=\"text | article-text\">Major schools in Texas have been impacted by the outage. That includes the University of Texas system, including campuses in Austin, Tyler and San Antonio. Texas A&amp;M and Rice University, Texas Tech and Baylor University are also affected.<\/p>\n<p class=\"text | article-text\">K-12 districts like Katy ISD, Houston ISD and Austin ISD were also reporting issues. A number of East Texas districts use Canvas.<\/p>\n<p><img decoding=\"async\" class=\"figure-img img-fluid mx-auto d-block\" alt=\"Students and teachers remain locked out as hacking group claims access to billions of records\" loading=\"lazy\" src=\"https:\/\/www.newsbeep.com\/us-tx\/wp-content\/uploads\/2026\/05\/ROCY7B623ZH5JAQPGCHNSRC5GU.jpg\" width=\"980\" height=\"551\" \/>Students and teachers remain locked out as hacking group claims access to billions of recordsEarlier messages<\/p>\n<p class=\"text | article-text\">\u201cUT Tyler has been notified by Instructure, the third-party vendor that operates Canvas, of a recent cybersecurity incident. While this was a vendor-level incident and was not directed specifically at UT Tyler, Instructure has informed the university that it was impacted.<\/p>\n<p class=\"text | article-text\">The company\u2019s investigation remains ongoing, and UT Tyler has not yet received final confirmation of the full scope of information involved. Instructure reports that some personal information tied to Canvas accounts may be involved, but it has found no indication that passwords, birth dates, government IDs or financial information were affected.<\/p>\n<p class=\"text | article-text\">Canvas continues to operate normally.<\/p>\n<p class=\"text | article-text\">UT Tyler leadership, Information Technology, Information Security and appropriate university offices are actively monitoring the situation and working with Instructure to assess any specific impacts to UT Tyler systems or data,&#8221; the university said in an email statement to KLTV.<\/p>\n<p class=\"text | article-text\">UT Tyler Information Security encouraged users to remain aware, saying such activity can lead to phishing attempts or other \u201csuspicious communication.\u201d <\/p>\n<p class=\"text | article-text\">The university asks users to follow these guidelines: <\/p>\n<p>Do not provide passwords, multi-factor authentication codes, personal information or account details in response to unsolicited emails, phone calls, text messages or other communications.Do not click suspicious links or open unexpected attachments claiming to be from Canvas, Instructure or UT Tyler.Access Canvas directly through official UT Tyler links rather than through links in unsolicited messages.If you receive a suspicious message or are unsure whether a request is legitimate, please report it immediately by using the \u201cReport Suspicious\u201d or \u201cReport Phish\u201d button in your email.<\/p>\n<p class=\"text | article-text\">UT Tyler advised users to access Canvas directly through official UT Tyler links rather than through links in unsolicited messages.<\/p>\n<p class=\"text | article-text\">UT\u2019s Canvas webpage stated that while some user data was exposed \u2014 names, email addresses and student IDs \u2014 no passwords, Social Security numbers or financial information were compromised.<\/p>\n<p class=\"text | article-text\">The platform is used differently by schools, so it\u2019s unclear exactly how damaging the breach will be for each one.<\/p>\n<p class=\"text | article-text\">Previous to regaining full access to Canvas Tyler ISDs sent this message to families: <\/p>\n<p class=\"text | article-text\">\u201cWe want to make you aware that Instructure, the parent company of Canvas, Tyler ISD\u2019s learning management system, is currently responding to a cybersecurity incident affecting Canvas clients nationwide.<\/p>\n<p class=\"text | article-text\">At this time, Tyler ISD is actively monitoring the situation to assess any potential impact. Like numerous school districts and universities across the country, we are currently locked out of the system while Instructure works through its response process.<\/p>\n<p class=\"text | article-text\">Instructure has not yet provided district-specific details regarding the scope of the incident. While the investigation remains ongoing, district leadership is reviewing any recommended next steps or mitigation measures as additional information becomes available. We are being diligent in our response and are working closely with our technology teams to monitor updates.<\/p>\n<p class=\"text | article-text\">We understand this situation may create challenges, including possible issues with accessing or turning in assignments. We appreciate the patience and flexibility of both our staff and families as we navigate this situation together.<\/p>\n<p class=\"text | article-text\">At this time, we are waiting for additional guidance from Instructure and will share verified updates as soon as we receive them.<\/p>\n<p class=\"text | article-text\">Thank you for your continued partnership, support, and understanding.&#8221;<\/p>\n<p>Copyright 2026 KLTV. All rights reserved.<\/p>\n","protected":false},"excerpt":{"rendered":"TYLER, Texas (KLTV) &#8211; A cyberattack caused chaos for students at thousands of schools as they study and&hellip;\n","protected":false},"author":2,"featured_media":285663,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[104935,104936,104938,27,29,28,104937,104939],"class_list":["post-285662","post","type-post","status-publish","format-standard","has-post-thumbnail","category-texas","tag-canvas-cyberattack","tag-shiny-hunters-hacking-group","tag-student-data-breach","tag-texas","tag-texas-headlines","tag-texas-news","tag-texas-schools-outage","tag-university-finals-disruption"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/posts\/285662","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/comments?post=285662"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/posts\/285662\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/media\/285663"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/media?parent=285662"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/categories?post=285662"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-tx\/wp-json\/wp\/v2\/tags?post=285662"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}