Canvas cyberattack disrupts Forsyth County Schools, hampering students and parents

Forsyth County students and parents lost a key line of communication when the Canvas cyberattack disrupted the platform used for assignments, announcements, grades and class updates. In a district where Canvas has been part of school life since March 2022, the outage mattered far beyond a login screen. It made it harder for families to check due dates, monitor coursework and follow teacher messages at a time when end-of-semester deadlines were already piling up.

Forsyth County Schools says students access Canvas through ClassLink, while parents and guardians use Observer accounts. Those observer accounts can view course content, assignments, due dates and events, but they cannot participate in a course. That setup means the platform is not just a classroom tool. It is also one of the main ways parents keep track of what students are missing, what teachers have posted and what work still needs to be turned in.

The disruption hit a broader digital school network across Georgia and North Carolina. Instructure placed Canvas, Canvas Beta and Canvas Test into maintenance mode on May 7, 2026, then later said Canvas was available for most users and eventually fully operational. Instructure also said its external forensic partner found no evidence that the threat actor still had access to the platform. Even so, the incident left schools checking whether every integration and connection had returned to normal.

North Carolina education officials took the threat seriously enough to disable access to Canvas through NCEdCloud for staff and students statewide on May 7 after reports that malicious direct messages had begun appearing in several districts. The North Carolina Department of Public Instruction said there was no estimated restoration time when it issued its update, underscoring how quickly a single platform problem can become a statewide instructional issue.

The scale was large enough that Georgia Tech said it was among more than 9,000 institutions affected worldwide, while Emory University extended grade submission deadlines by seven days. ShinyHunters claimed nearly 9,000 schools and 275 million individuals were affected. For Forsyth families, the takeaway is blunt: a system built to streamline school communication can also become a single point of failure, and district leaders will face pressure to explain how much student and parent information was exposed, how quickly notifications moved, and what safeguards are in place if the next outage is worse.