A massive cyberattack that crippled the Canvas online learning platform as finals were getting underway at many universities could leave them scrambling for as long as a month — and expose the education software giant to major legal and financial fallout, cybersecurity experts told The Post.

The breach of the popular learning platform, owned by Instructure, disrupted coursework, exams and student communications at universities and school systems across the US and beyond after hackers linked to the notorious ShinyHunters group said they infiltrated the system and exposed sensitive user data.…