Columbia University was one of thousands of institutions affected by a Canvas cyberattack on May 7, 2026, when students lost access to the learning platform. ShinyHunters, a cybercriminal group, claimed responsibility for the breach and threatened to leak data unless ransom was paid by May 12. Canvas access was restored around 9:30 p.m., more than four hours after the attack.