Wits caught in data breach: Here’s the info compromised and that could be leaked

University of Witwatersrand. Picture: Raymond Preston Hackers have given a company that provides educational technology to Wits University until next week to give in to their ransom demand before it leaks students’ personal information. The university toldThe Citizenit is one of approximately 8 800 institutions worldwide affected by a global cyberattack targeting the Canvas learning management system.

Wits communications manager Shirona Patel also confirmed on Friday that the university’s learning management platform, Ulwazi, had since been restored. “Our learning management system is up and running again!” Patel toldThe Citizen. According to Patel, the university was informed about the breach on Thursday.

“The University can confirm that a cybersecurity incident has occurred involving Instructure, the company that manages Canvas, the University’s student learning management system,” Patel said. “Instructure informed Wits and other universities across the world of a data breach to its systems yesterday, 7 May 2026. This appears to be because of an attack by a cyber extortion group.” Patel said information that may have been compromised includes student names and email addresses, student numbers and conversations contained within Canvas inboxes.

[paywall]

“At this stage, the full extent of the breach and the volume of data impacted is not yet known. Forensic investigations are currently underway at Instructure, and further details will be shared as information becomes available,” she added. Wits urged students and staff to remain cautious of phishing attempts or suspicious emails claiming to come from Canvas or the university.

[/paywall]