A cyberattack on Canvas knocked out access for students at Harvard, Columbia, and hundreds of other schools during finals

The company's chief information security officer, Steve Proud, wrote in an incident log that Instructure had "recently experienced a cybersecurity incident perpetrated by a criminal threat actor." A day later, he added that the exposed data included names, email addresses, student ID numbers, and messages exchanged on the platform.