
By Holly the Assistant
About noon yesterday I got the first note from a college student of my acquaintance, followed very shortly by confirmation from a different student at a different school: Canvas got hacked by a ransom group.
Canvas, for all five of you that have not had to deal with it for a public school, a public charter school, a private school, a college, a university, or any other group that uses it, is a really pretty terrible software platform that lets you read textbooks, download assignments, upload assignments, take exams, check grades, submit grades, etc. It works mostly, depending on the users. Mostly.
Which makes it slightly better than the competition, so many educational entities have signed up. Internationally many.
Almost all the eggs are in one basket, and as those of us who remember the nineties recollect, the tech troublemakers target the biggest basket as much as they can: the payout is better, whether money or chaos.
One friend asked “But what do they think they’ll gain? Who would pay the ransom?”
My answer was “Not everyone is as tech savvy as you are. Think of our local school district, which had to close a school due to declining enrollment, and whose position is ‘we didn’t do anything wrong, it’s home schoolers’. Faced with the ransom message, with a debit card to a slush fund meant to cover paper and toner, and two weeks from final exams, are you absolutely sure that some administrator isn’t going to pay up to avoid more people pulling their kids out angrily and more school closures resulting?”
The policy at the colleges and universities appears to be landing solidly on “We’ll just cancel finals in the affected classes.” So no finals for the kids who waited to the last minute to take the online finals, and the pre-final grade is the grade for the class. Or that’s how it’s playing out for my friends. Colleges I don’t have sources at, or where my sources are busy taking in-person finals right this minute, may be doing other things.
There’s no great answer in the short term.
In the long term, maybe more pen and paper in person exams. I’m old enough to remember blue book exams, and I heard those are coming back in some classes because of AI usage by students, which is a whole other thing, because apparently it’s been found that a number of the students enrolled in online classes and turning in AI essays are not actual people but extraction of loans and grant money fictions who vanish when the funds are gone with no recourse for the government . . . but that’s a different story.
I certainly don’t fondly remember standing in line with the course registration paper in hand, waiting at the registrars’ office to sign up for classes. It worked, but it was obnoxious and a pain. Online WAS quick and easy, comparatively . . . but right now it’s down, so you cannot register.
Link to schools affected, sort of (found not the individual districts but the state department of education for my state):https://privatebin.net/?f8c17bc224cd9f22#F2qrJM6a2juvQjziJTH8Pbwef5Lsa8TzRbCFW5FMg4uW
A good summary article: https://stateofsurveillance.org/news/instructure-canvas-shinyhunters-275-million-students-3-6tb-breach-2026/
If you and your children are affected, time for The Old Freeze Your Credit Song and Dance. Except if you did that two months ago for the Blue Cross Blue Shield hack, you’re probably still frozen. Or one of the many, many other hacks, that have become part of our daily lives.
At the same time, our oh-so-safe-by-obscurity Linux distros have had a couple nasty exploits discovered in the last week. Maybe not-so-safe-by-obscurity anymore.
P.S. Those are not MY eggs pictured: mine are considerably dirtier because my hens are messy creatures. I do believe that eggs are probably safe from computer hackers, but the local magpies are hopeful of successful thievery. The roosters think that magpies look like they might be tasty . . . in any event, there are no computers involved in the production of eggs here, and the highest tech is the whiteboard that holds the daily records.









