{ "id": "2026-05-07-university-of-illinois-canvas-finals-postponement", "slug": "university-of-illinois-canvas-finals-postponement-2026-05-07", "institution": { "name": "University of Illinois Urbana-Champaign", "shortName": "UIUC", "state": "IL", "type": "public-r1", "alertSystemName": "Illini-Alert / Strategic Communications", "enrollment": 56600 }, "incident": { "date": "2026-05-07", "endDate": "2026-05-10", "type": "other", "cleryCategory": "advisory", "resolution": "confirmed-threat", "headline": "Campus alert, May 7, 2026", "summary": "On May 7, 2026, [the learning-management platform Canvas was hit by a ShinyHunters cyberattack](https://www.cnn.com/2026/05/07/us/canvas-hack-strands-college-students-finals-week) that replaced its login page with a ransomware message. Within hours, [the University of Illinois Urbana-Champaign — one of the largest Canvas customers in the country — announced via mass email Thursday evening that ALL final exams and assignments scheduled for Friday, Saturday, and Sunday (May 8-10, 2026) were postponed](https://www.wbez.org/education/2026/05/08/university-of-illinois-finals-postponed-canvas-schools-cyberattack-hacked). Final exams originally scheduled for May 8 were ultimately rescheduled to Sunday, May 10. UIUC was followed by Virginia Tech, GMU, UVA, and dozens of other institutions in postponing finals.", "outcome": "All finals scheduled May 8-10 at UIUC were rescheduled. May 8 finals moved to Sunday, May 10. Per Instructure, the breach exposed names, email addresses, student ID numbers, and inter-user messages but not passwords, SSNs, dates of birth, or financial information. UIUC's Strategic Communications office issued multiple updates over the following 5 days as Canvas access was restored.", "casualties": { "killed": 0, "injured": 0 } }, "alerts": [ { "sequence": 1, "type": "initial", "timestamp": "2026-05-07T20:45:00-05:00", "channel": "email", "verbatimText": "Dear Faculty, Staff, and Students,\nDue to the global cyberattack that has taken Canvas offline at universities across the country, all final exams and assignments, including papers, projects, etc., scheduled for Friday, Saturday, or Sunday are postponed. For the sake of consistency and clarity, the university is extending this policy to all classes, including those that don’t currently utilize Canvas.\nSome Canvas users viewed a message as part of the cybersecurity incident that contained malicious website links and other contact points. It is important to not click or visit these links as they can also be sources of malware or potential compromise.\nUniversity leaders will consult with the Deans and the Senate Executive Committee regarding next steps and will communicate to the campus community before noon on Sunday, May 10, with more details regarding Canvas, assignments, and final exams currently scheduled for next week.\nAs more information becomes available, updates will be posted on the University Statements webpage and the 2026 Canvas Incident page. Instructure, the parent company of Canvas, is still investigating and has not shared specific information with us regarding Illinois data included in the breach.\nIllinois is one of thousands of universities currently experiencing the same issue. Technology and academic leaders are communicating with our peer institutions as we explore options for next steps. I understand this situation adds new stress and uncertainty to the end of the academic year, and I thank you for your patience as we work through this disruption.\nSincerely,\nJohn Coleman\nProvost", "isVerbatimConfirmed": true, "sourceUrl": "https://massmail.illinois.edu/massmail/277104776.html", "sourceDescription": "UIUC Massmail — All final exams & assignments scheduled for Friday, Saturday, and Sunday are postponed (May 7, 2026 8:45 PM)", "annotations": [ "Recovered verbatim from the official UIUC Massmail archive page linked from stratcom.illinois.edu university statements" ], "characterCount": 1625 }, { "sequence": 2, "type": "update", "timestamp": "2026-05-08T20:56:00-05:00", "channel": "email", "verbatimText": "Dear Students, Faculty, and Staff,\nEarlier this evening, after more than 24 hours of working around the clock, the team at Technology Services received some good news: they were able to restore a connection to Canvas to begin investigating whether the service can appropriately be restored for students, faculty, and staff to use. It will take until midday tomorrow to confirm that continued use does not present undue risk to our university community and their data.\nOver the past day, we have listened to concerns expressed by students and instructors. We recognize that the unavailability of our learning management system continues to create uncertainty during an already stressful time of the year. At the same time, we remain committed to prioritizing the security of the members of our university community and their data.\nBased on the information currently available to us, we envision two possible scenarios for how the weekend and the rest of finals week will proceed. We do not wish to introduce additional uncertainty but we do want to give students and instructors the greatest possible advance notice that we can. We plan to communicate tomorrow afternoon when we know which path we will take.\nIf Canvas is restored for use on Saturday.\nIf it is determined appropriate to restore for use for faculty, students, and staff, our team will reconnect Canvas at Illinois and notify users it is back online. If Canvas is back online by 4 p.m. tomorrow, all exams originally scheduled for Friday, May 8, will take place on Sunday, May 10. All exam times and locations will remain unchanged from their originally scheduled time on Friday, with only the date shifting to Sunday. Students who cannot take exams on Sunday will be offered alternatives as determined by their department and instructor. Instructors who cannot facilitate exams on Sunday will be offered options by their department.\n\nSimilarly, course instructors will be able to assign a new due date for any final assignments, projects, or other final evaluations that were originally due on Friday or Saturday. Instructors have discretion to assign new due dates as they deem appropriate and may communicate directly with students about their expectations.\nIf Canvas cannot be safely restored for use.\nIf it is determined that Canvas cannot be turned back on safely, we will communicate with deans, department heads, and instructors regarding alternate ways to end the semester, taking into consideration travel arrangements, housing, graduation, and human resources. We will share more information before noon on Sunday, May 10, as previously communicated in my message to you on Thursday, May 7.\nWe have published FAQs and updates based on the information we have available to us. I strongly urge you to explore those as they address the most common questions we have received.\nThank you for your resilience and adaptability during a difficult situation for everyone. Thank you also for your continued support of each other.\nSincerely,\nJohn Coleman Provost", "isVerbatimConfirmed": true, "sourceUrl": "https://massmail.illinois.edu/massmail/195390352.html", "sourceDescription": "UIUC Massmail — Update on Canvas outage and next steps (May 8, 2026 8:56 PM)", "annotations": [ "Recovered verbatim from the official UIUC Massmail archive page linked from stratcom.illinois.edu university statements" ], "characterCount": 3026 }, { "sequence": 3, "type": "update", "timestamp": "2026-05-09T11:51:00-05:00", "channel": "email", "verbatimText": "Dear Faculty, Staff, and Students,\nCanvas at Illinois is now online and available to our university community. Technology Services has performed integrity and assurance testing to the extent possible.\nAs previewed in yesterday’s message, all exams originally scheduled for Friday, May 8, will take place on Sunday, May 10. All exam times and locations will remain unchanged from their originally scheduled time on Friday, with only the date shifting to Sunday. Any students who were scheduled to complete one or more final exam on Friday will receive confirmation of the new Sunday exam time(s) in a forthcoming email from the Office of the Registrar. The Computer-Based Testing Facility has added time slots for this week to accommodate canceled exams, and you can make new reservations now.\nSimilarly, course instructors will be able to assign a new due date for any final assignments, projects, or other final evaluations that were originally due on Friday or Saturday. Any final exams or projects originally planned for Monday through Friday will remain as scheduled, unless otherwise noted by your instructor.\nAs always, instructors continue to have the discretion to make changes they deem appropriate to meet course objectives. Deans have asked all instructors to be mindful of the needs of students with an approved accommodation through DRES.\nStudents should look for communication and guidance coming from their instructors. Students who cannot take exams on Sunday will be offered alternatives as determined by their department and instructor. Instructors who cannot facilitate exams on Sunday will be offered options by their department.\nAs you start to use the Canvas platform again:\nPlease be aware of increased risk associated with phishing and social engineering. Never share your personal or account information. Remain vigilant and exercise caution when clicking links or opening/downloading attachments via email.\n\nThe Canvas application may be slower than normal. Integrations and applications that interact with Canvas may not function initially. Technology Services staff will continue to work to enable them.\nCampus support desks will experience higher volume over the next few days, and response times may be delayed.\nFor additional technical information, visit the Canvas Incident page at go.illinois.edu/2026-Canvas-Incident. There are also additional FAQs on the University Statements webpage.\nWe all understand this solution is not ideal. Some students, faculty, and staff have religious observances on Sunday. And Sunday, May 10, is Mother’s Day. However, this course of action has emerged as the best option among a list of potential solutions, each of which had complications and downsides. We’ve heard significant concerns from our students about extending finals past Thursday of this coming week. Many students have travel plans, are starting jobs or internships, or have other obligations. Extending exams beyond finals week would introduce additional issues including housing and the conclusion of some instructor contracts on May 16. Holding exams on Sunday keeps the schedule as close as possible to the original timeline.\nThank you again for your understanding during this difficult situation for our university community.\nSincerely, John Coleman Provost", "isVerbatimConfirmed": true, "sourceUrl": "https://massmail.illinois.edu/massmail/1705225704.html", "sourceDescription": "UIUC Massmail — Canvas at Illinois has been restored (May 9, 2026 11:51 AM)", "annotations": [ "Recovered verbatim from the official UIUC Massmail archive page linked from stratcom.illinois.edu university statements" ], "characterCount": 3293 } ], "context": "The [University of Illinois Urbana-Champaign](https://en.wikipedia.org/wiki/University_of_Illinois_Urbana%E2%80%93Champaign) is the flagship R1 public research university of the University of Illinois system, enrolling about 56,600 students. On Thursday evening, May 7, 2026, the [Canvas learning-management platform was struck by a ShinyHunters cyberattack](https://en.wikipedia.org/wiki/2026_Canvas_security_incident) that replaced its login page with a ransomware message and threatened to leak student data unless paid by May 12. With approximately 9,000 institutions worldwide using Canvas, the attack rippled across higher education in the middle of finals week. UIUC was among the [first R1 universities to announce a blanket finals postponement](https://chicago.suntimes.com/education/2026/05/08/university-of-illinois-finals-postponed-canvas-schools-cyberattack-hacked), issuing a mass email Thursday evening declaring that ALL final exams and assignments scheduled for May 8-10 were postponed. The [UIUC Strategic Communications office](https://stratcom.illinois.edu/university-statements/ongoing-cybersecurity-event-affecting-canvas/) continued to issue updates as Canvas access was progressively restored. Final exams originally scheduled for Friday, May 8 were [rescheduled to Sunday, May 10](https://www.wbez.org/education/2026/05/12/u-of-i-reschedules-finals-canvas-hack-deal) (Mother's Day) drawing widespread commentary. Instructure later confirmed that affected data was limited to names, email addresses, student ID numbers, and inter-user messages. The case illustrates a relatively new category of campus 'alert': not an emergency-notification under Clery, not a timely warning, but a Community Advisory issued at scale when a third-party technology vendor's outage cascades into the academic infrastructure. UIUC's choice to use its mass-notification email channel (rather than the Illini-Alert SMS emergency-system) is itself a Clery-classification decision: the Canvas hack was not an immediate threat to student physical safety, even as it forcibly rescheduled the academic calendar of more than 50,000 students.", "keyFindings": [ "UIUC was among the FIRST R1 publics to announce a blanket multi-day finals postponement in response to the Canvas ShinyHunters attack, within hours of the May 7 attack", "UIUC deliberately used its mass-email Community Advisory channel rather than Illini-Alert SMS, signaling that this was a Clery 'advisory' (informational) rather than an 'emergency notification' (immediate physical-safety threat)", "Rescheduling Friday May 8 finals to Sunday May 10 (Mother's Day) became a national news story in itself and reflected the constraint of the academic calendar (commencement loomed the following week)", "The Canvas incident represents an emerging category in this archive: vendor-driven campus advisories that affect tens of thousands of students simultaneously without involving any campus-physical-safety threat" ], "sources": [ { "title": "Ongoing cybersecurity event affecting Canvas (UIUC Strategic Communications)", "url": "https://stratcom.illinois.edu/university-statements/ongoing-cybersecurity-event-affecting-canvas/", "type": "official-archive" }, { "title": "Canvas hack leads U. of I. to postpone finals, schools scramble without popular learning tool (WBEZ Chicago)", "url": "https://www.wbez.org/education/2026/05/08/university-of-illinois-finals-postponed-canvas-schools-cyberattack-hacked", "type": "local-media" }, { "title": "U. of I. reschedules finals after learning platform Canvas reaches deal with hackers (WBEZ Chicago)", "url": "https://www.wbez.org/education/2026/05/12/u-of-i-reschedules-finals-canvas-hack-deal", "type": "local-media" }, { "title": "UIUC postpones finals and assignments amid widespread Canvas cybersecurity breach (Capitol City Now)", "url": "https://capitolcitynow.com/news/248842-uiuc-postpones-finals-and-assignments-amid-widespread-canvas-cybersecurity-breach/", "type": "local-media" }, { "title": "UPDATE: Canvas restored at U of I, final exams rescheduled (WCIA)", "url": "https://www.wcia.com/news/champaign-county/cybersecurity-incident-affecting-canvas-service-at-central-il-colleges-universities/", "type": "local-media" }, { "title": "2026 Canvas security incident (Wikipedia)", "url": "https://en.wikipedia.org/wiki/2026_Canvas_security_incident", "type": "other" }, { "title": "UIUC Massmail: All final exams & assignments postponed (May 7, 2026)", "url": "https://massmail.illinois.edu/massmail/277104776.html", "type": "official-archive" }, { "title": "UIUC Massmail: Update on Canvas outage and next steps (May 8, 2026)", "url": "https://massmail.illinois.edu/massmail/195390352.html", "type": "official-archive" }, { "title": "UIUC Massmail: Canvas at Illinois has been restored (May 9, 2026)", "url": "https://massmail.illinois.edu/massmail/1705225704.html", "type": "official-archive" }, { "title": "UIUC Massmail: Ongoing cybersecurity event affecting Canvas (May 7, 2026 4:33 PM)", "url": "https://massmail.illinois.edu/massmail/882057112.html", "type": "official-archive" } ], "confidence": "high", "tags": [ "advisory", "cybersecurity", "canvas-hack", "shinyhunters", "public-r1", "illinois", "finals-week", "vendor-incident", "non-physical-threat", "mass-email-advisory", "may-2026-canvas-incident" ], "dateAdded": "2026-05-14", "lastUpdated": "2026-07-18", "addedBy": "ingestion" }