ShinyHunters Breach Instructure's Canvas Platform, Exposing User Data
Cybercriminal group ShinyHunters has breached Instructure's Canvas learning management system, compromising personal information of users across nearly 9,000 educational institutions worldwide.
On May 1, 2026, Instructure, the company behind the Canvas learning management system, disclosed a cybersecurity incident affecting its platform. The breach, attributed to the cybercriminal group ShinyHunters, has potentially exposed personal information of users from approximately 9,000 educational institutions globally.
Instructure confirmed that the compromised data includes names, email addresses, student ID numbers, and messages exchanged between users. The company stated that there is no evidence suggesting that passwords, dates of birth, government identifiers, or financial information were affected.
ShinyHunters has claimed responsibility for the attack, alleging the theft of 3.65 terabytes of data associated with 275 million users. The group has issued a ransom demand, threatening to release the stolen data unless their conditions are met.
In response to the breach, Instructure has revoked certain credentials and access tokens, implemented security patches, and enhanced monitoring measures. The company is collaborating with external cybersecurity experts to investigate the incident and mitigate its impact.
Educational institutions utilizing Canvas are advised to remain vigilant, monitor for any suspicious activity, and follow guidance provided by Instructure to ensure the security of their systems and data.