The University of Alberta is among over 9,000 educational institutions impacted by a cybersecurity breach that disrupted operations at campuses throughout Canada. University officials disclosed that a cyber incident targeted the Canvas learning management system used by students and staff at their Edmonton campus.
The U of A, the largest university in Alberta with more than 44,000 students, stated that the extent of information exposed in the breach is still being investigated. Canvas, a widely used platform managing educational programs such as grades, course materials, assignments, and videos, is relied upon by numerous universities and schools globally.
While the breach led to a temporary shutdown of the site, access has since been restored for most users. The University of Alberta assured that sensitive data like passwords, birthdates, government IDs, and financial information is not stored on the Canvas platform and remains secure. Despite containing the incident, the university’s privacy and security teams are actively investigating the situation.
The breach was attributed to a group called ShinyHunters, as confirmed by cybersecurity experts. The hackers claimed to have accessed billions of private messages and records from nearly 9,000 schools worldwide, including the affected Canadian universities like the University of Toronto, UBC, and SFU. Instructure, the company behind Canvas, promptly addressed the breach by taking the platform offline and temporarily suspending Free-For-Teacher accounts that were exploited by the unauthorized actor.
Instructure’s actions to mitigate the breach instilled confidence in restoring access to Canvas, with the company expressing regret for any inconvenience caused. The incident underscores the ongoing challenges universities and educational institutions face in safeguarding sensitive data against cyber threats.