Over the past several decades, schools and universities have done exactly what every other institution has done: they have systematically outsourced their operational backbone to technology products and the companies that build them. The list of platforms that now mediate the basic functions of education including attendance, grades, assignments, communication is almost comically long. Most educational institutions are running ten to fifteen different EdTech products that all promise efficiency, but in reality, create confusion, frustration, and complicate what was once much simpler [1].

The trade-off has always been framed as giving up a degree of control and data in exchange for efficiency. Schools traded the governance of their operations for cost savings, scale, and the recurring promise that technology would finally transform learning. It has not. And now, when a single platform gets compromised, the entire operation of thousands of schools grinds to a halt [1].

The recent cyberattack on Canvas, the learning management system operated by Instructure, serves as a vivid illustration of this dependency. In early May 2026, the hacking group ShinyHunters breached the platform, exposing the data of approximately 275 million users across nearly 9,000 institutions globally [2]. The compromised data included usernames, email addresses, student identification numbers, and private messages exchanged between students and teachers [2]. In response, Instructure temporarily took the system offline, causing widespread disruption during critical end-of-year examination periods for universities in Europe, North America, and Australasia [2].

This incident is not merely an IT failure; it is a structural crisis. When a centralized platform used by 41 percent of North American higher education institutions and widely adopted across Europe fails, it reveals the fragility of outsourcing educational infrastructure to international, predominantly American, technology companies [2]. The subsequent revelation that Instructure paid an undisclosed ransom to the hackers to secure the deletion of the stolen data further underscores the precarious position of institutions that rely on these platforms [3]. Schools have effectively outsourced their agency, leaving the security of their students' data in the hands of corporate entities negotiating with extortionists.

The Push for European Digital Sovereignty

The debate surrounding data sovereignty and the need for alternatives to US Big Tech is no longer theoretical. In Europe, the conversation has shifted from academic discourse to concrete procurement decisions. Institutions with significant stakes are beginning to move away from entrenched American platforms in favour of sovereign, open-source, or European-hosted solutions.

France recently mandated the migration of 2.5 million civil servant workstations from Microsoft Windows to Linux by 2026 [4]. The French government cited the need to "regain control of our digital destiny" and reduce reliance on foreign technology, a move that follows its earlier decision to replace Microsoft Teams with a sovereign, open-source video conferencing tool [4]. Similarly, Denmark's Ministry of Digitalisation has announced plans to phase out Microsoft Office 365 in favour of the open-source suite LibreOffice [5]. At the institutional level, the European Central Bank selected the French provider OVHcloud to build the infrastructure for the digital euro, ensuring that the underlying data remains under European jurisdiction [6].

These developments signal a broader recognition that digital sovereignty is essential for maintaining control over critical infrastructure. As the European EdTech Alliance recently noted, "Europe’s digital sovereignty depends on who controls the platforms shaping young minds" [7]. If Europe intends to protect its data, its platforms, and the values imparted to its learners, educational technology must be a central component of its digital strategy [7].

Open-Source Solutions in Education

The vulnerabilities exposed by the Canvas breach highlight the necessity of rethinking how educational institutions procure and deploy technology. The alternative to centralized, proprietary platforms is an ecosystem built on open-source infrastructure. Open-source platforms and tools are already changing digital education in Europe, providing educators, institutions, and policymakers with greater flexibility, ownership, and control [8].

The European Union has increasingly emphasized the importance of this shift. The Council of the European Union recently adopted conclusions calling on national governments to promote the development of education-specific AI tools and to strengthen teachers' digital skills [9]. Crucially, the Council argued that technology should support human agency and democratic values, advocating for an approach based on "digital humanism" [9]. This aligns with the broader push to reduce technological dependence on tools developed outside Europe, which the Council identified as a risk to both pedagogical autonomy and data security [9].

Open-source learning management systems, such as Moodle, Chamilo, and OpenOlat, offer viable alternatives to proprietary platforms [10]. Because the underlying code is open and adaptable, institutions can host these systems on sovereign servers, ensuring compliance with the General Data Protection Regulation (GDPR) and maintaining strict control over student data. Furthermore, interoperability standards allow these systems to integrate seamlessly with other tools without locking institutions into a single vendor's ecosystem.

Reclaiming the Operational Backbone

Teachers play a central role in harnessing the potential of digital tools in the classroom. They are essential for fostering responsible digital citizenship and helping learners reflect on the societal, environmental, and ethical implications of technology [9]. However, teachers cannot fulfill this role effectively if the very platforms they use undermine their autonomy and compromise their students' privacy.

The Canvas catastrophe should serve as a definitive wake-up call. The efficiency promised by centralized EdTech platforms is a false economy if it comes at the cost of institutional agency and data security. The path forward requires a commitment to digital sovereignty in education. Institutions must transition toward open-source, interoperable systems that they control, hosted within jurisdictions that respect stringent data protection laws.

Europe is currently building the infrastructure necessary for this transition, moving away from reliance on US Big Tech and investing in sovereign alternatives. Educational institutions must join this movement. By reclaiming control of their operational backbone, schools and universities can ensure that technology serves the pedagogical needs of teachers and learners, rather than the commercial interests of distant corporations.

References

[1] Tavoulareas, E. (2026). "Schools have outsourced their agency."

[2] Wikipedia. (2026). "2026 Canvas security incident."https://en.wikipedia.org/wiki/2026_Canvas_security_incident [3] Inside Higher Ed. (2026). "Instructure Pays Ransom to Canvas Hackers." https://www.insidehighered.com/news/tech-innovation/administrative-tech/2026/05/11/instructure-pays-ransom-canvas-hackers

[4] TechCrunch. (2026). "France to ditch Windows for Linux to reduce reliance on US tech." https://techcrunch.com/2026/04/10/france-to-ditch-windows-for-linux-to-reduce-reliance-on-us-tech/

[5] The Register. (2025). "Danish department determined to dump Microsoft." https://www.theregister.com/software/2025/06/13/danish-department-determined-to-dump-microsoft/855832

[6] OVHcloud. (2026). "OVHcloud to provide sovereign cloud services for the ECB digital euro."

[7] European EdTech News. (2025). "Europe’s Digital Sovereignty Has an Education Blind Spot."https://europeanedtechnews.substack.com/p/europes-digital-sovereignty-has-an

[8] European Digital Education Hub. (2026). "Open-source platforms and tools." https://ec.europa.eu/newsroom/eacea_oep/items/936445/en

[9] Council of the European Union. (2026). "Council conclusions on teachers in the era of artificial intelligence (AI)." https://data.consilium.europa.eu/doc/document/ST-9003-2026-INIT/en/pdf

[10] TrustEU. (2026). "European alternatives to Canvas." https://www.trusteu.eu/en/alternatives-to/canvas