International cyber attack disrupts swathe of universities and schools

A hacking group breached the academic software Canvas, used by thousands of schools and universities across the globe. International cyber attack disrupts swath of universities and schools Copyright current_year BBC. All rights reserved. The BBC is not responsible for the content of external sites. Read about our approach to external linking. Copyright current_year BBC. All rights reserved. The BBC is not responsible for the content of external sites. Read about our approach to external linking. A stock photo of students in a classroom, with one woman jotting in her notepad International cyber attack disrupts swathe of universities and schools A cyber attack hit several universities and schools in the US, Canada and Australia, causing chaos, confusion and major disruptions amid the high stakes end-of-year season. The hacking group ShinyHunters claimed responsibility for the attack, which caused the academic software Canvas used by thousands of schools and universities to go offline this week. By late Thursday, the company Instructure, which owns Canvas, posted an update on its website saying that Canvas was "available for most users", but some universities were still reporting outages on Friday. The cyber attacks targeted universities and schools across the globe, affecting an estimated 9,000 institutions. A ransom note demanding payment in bitcoin appeared on screens during a cyber-hacking incident on the cloud-based platform Canva. Mississippi State University announced that it was postponing Friday's final exams to allow affected students to recover any lost work. Aubrey Palmer, a meteorology student at the university, told the BBC students had just finished a 2,900-word exam essay when a ransom note suddenly appeared on their screens. The message read: "Shiny Hunters has breached Instructure (again)." It threatened to release stolen data unless Canvas or the affected universities paid a ransom in bitcoin. "My knee‑jerk reaction was that I'd been hacked myself, because that's what it looked like," Palmer said. "But then I actually read the ransom note and saw it was Canvas that had been hacked." Palmer said the professor and dozens of other students all had the note and everyone was looking around the room in confusion. At first, it was unclear whether their work had been saved. Frustration quickly spread among the students, and Palmer said people became "so angry at the idea of having to redo" their exams. The university has since been updating students by email, rescheduling exams, and advising them to ignore suspicious messages while responding to what it described as a "nationwide security incident". Meteorology student Aubrey Palmer points to a weather diagram on a blackboard with a piece of chalk while smiling and facing a classroom. The University of Sydney told students on Friday "Canvas was unavailable" and instructed students not to attempt to log in. "We are one of approximately 9000 institutions around the world that are impacted by this outage, and we are still waiting for advice from Instructure," the university wrote on its website. The outage affected students' coursework and examinations, the university said, acknowledging "how disruptive this is at a critical time in the semester". On Thursday, Idaho State University said it had cancelled exams scheduled after 12:00 local time (18:00 GMT). Penn State University wrote in a message to students on Thursday that "no one has access" to Canvas, adding that a "resolution" was unlikely to arrive "within the next 24 hours". The university cancelled some exams scheduled for Thursday and Friday. In an update on Thursday evening, the University of British Columbia in Vancouver informed students that Canvas was "unavailable due to a cyber breach of its parent company Instructure", and advised them to log out immediately. The University of Toronto also reported it was impacted by the breach, saying that "multiple universities were affected". Students at the University of California Los Angeles struggled to submit assignments online through the Canvas platform, and the University of Chicago, in Illinois, temporarily disabled its Canvas page after reports that it was targeted. Joe Tidy looking down at a phone. He has short brown hair and is wearing a light blue shirt. 'You'll never need to work again': Criminals offer reporter money to hack BBC The Chicago Maroon, the university-led newspaper, posted a screenshot of a message from ShinyHunters that appeared to be seeking a ransom. The message encouraged the university to contact the hacking group privately "to negotiate a settlement" and avoiding "the release of their data". It was the same message that Northwestern University masters student Jacques Abou-Rizk said he received when he clicked a link in an email that appeared to be from a university administrator. "I didn't know what was happening," Abou-Rizk recalled. "It's a scary message to receive." He said the university addressed the issue on Thursday, sending a generic email, seen by the BBC, that said Northwestern was "monitoring an issue". The email stated the university did not have an estimated restoration time for Canvas and that other IT infrastructure had not been affected. Abou-Rizk said he was still unable to access Canvas on Friday and has not heard from the university since. "There's definitely anxiety surrounding not only being able to complete my work and access the sites that I need access to on Canvas," Abou-Rizk said. "But also just not knowing exactly what the threat is and how it might affect me. "I don't know what data will be released, and that scares me." The BBC has contacted Northwestern University for comment. ShinyHunters has been linked to several high‑profile cyber attacks in the past, including a major and economically damaging hack on Jaguar Land Rover last year. Screen shots show the targeted threats from the group began on Sunday, with deadlines given on Thursday and 12 May, Luke Connolly, a threat analyst at the cyber security firm Emisoft, told the Associated Press. He said discussions regarding extortion payments could be ongoing. The group would not say what it plans to do with the data it claims to have taken during the latest attack. Cyber attacks on Thursday came the same day that the top US Senate Democrat, Chuck Schumer, sent a letter to the Trump administration urging for more defence against cyber risks in the age of rapidly developing AI. The Department of Homeland Security - the agency that helps ward off against cyber attacks - "must immediately help states and localities", Schumer wrote. The Department of Homeland Security - the agency that helps ward off against cyber attacks - "must immediately help states and localities", Schumer "Before Americans are hit with outages, disruptions, and attacks that could put lives and livelihoods at risk," he continued. Have you been affected? Share your experiences here Have you been affected? Share your experiences With additional reporting by Rebecka Pieder, and Nadine Yousif in Toronto. A woman with red hair is sitting on a sofa, holding her smartphone in front of her as she looks directly at its front camera. UK cyber chiefs say it's time to ditch passwords for passkeys - what are they? Passwords have long been the default way we secure accounts online but the NCSC has said passkeys are a better option. The AI company has said the model is too dangerous to release publicly because of its hacking capabilities. Experts say Mythos potentially has an unprecedented ability to identify and exploit cyber-security weaknesses. One Nation gains its first seat in the lower house, in a by-election seen as a key test for the populist party. Molecules that can capture heat could be a useful technology to decarbonise heating. Krista Scelza, 33, opens up about the reasons why she became a surrogate for a couple from Bolton. Abbas Araghchi says the US attacks each time there is a diplomatic solution on the table. Those within the UFO community spent their day scrutinizing the new documents, images and videos released by the Pentagon.