The group has also been linked with attacks on Ticketmaster, Rockstar Games, Salesforce, and Australian flag carrier Qantas.

Instructure, parent company of the education platform Canvas, said it took “immediate steps” to contain the hack before calling law enforcement.

Canvas, a cloud-based learning management platform used by thousands of schools and universities, is back up after it was disabled for hours May 7.

Nearly 9,000 schools globally were affected when Canvas was hacked on Thursday night. Here's where things stand today.

An unknown group of hackers is breaking into systems previously breached by the cybercrime group TeamPCP. Once inside, the hackers immediately kick out TeamPCP and remove its hacking tools from the victims’ systems.

Criminal hacker and extortion group ShinyHunters claimed to have breached Canvas parent company Instructure, shutting down access to Canvas for students and faculty Thursday. Canvas serves as Stanford’s “primary learning management system,” and services 2,400 instructors and 19,000 students in 2,000 courses each quarter.