Instructure Resolves Canvas Data Breach with Hackers

Instructure Resolves Canvas Data Breach with Hackers

Instructure, the company operating the Canvas learning management system, experienced a cyberattack by the hacking group ShinyHunters that compromised personal data of users from nearly 9,000 educational institutions worldwide, according to The Daily Pennsylvanian. The attack disrupted access to Canvas for thousands of schools globally, impacting students and faculty during critical exam periods, as reported by AP News and BBC.

Instructure later paid a ransom to recover the compromised data affecting approximately 275 million users across over 8,800 institutions, according to Inside Higher Ed. The company ultimately reached an agreement with ShinyHunters for the return and destruction of the stolen user data, as detailed by The New York Times.

Actors

Instructure ShinyHunters

Locations

Instructure Headquarters
Verdict: Partial Confidence: 62% Claims: 3
At a glance

The claim that the breach affected approximately 275 million users across over 8,800 institutions was confirmed. The assertion that, on May 7, 2026, the cybercriminal group ShinyHunters breached Instructure's Canvas learning management system was partially confirmed, as the main event was verified but some specific details remained unconfirmed. There was not enough evidence to verify the claim that the breach compromised personal information of users across nearly 9,000 educational institutions worldwide.

Sign in or subscribe to unlock the full breakdown: claims, sources, and validations.

This section contains an automated verification of claims against external sources and may contain inaccuracies.

Articles

May 12, 2026
2 total
Instructure Reaches Agreement with Hackers Over Canvas Data Breach
Instructure Reaches Agreement with Hackers Over Canvas Data Breach

The New York Times • 12 May 05:23

Instructure, the company behind the Canvas learning platform, has reached an agreement with the hacking group ShinyHunters for the return and destruction of stolen user data.

Credibility 90% Manip. 10% Center
Instructure Pays Ransom to Retrieve Canvas User Data
Instructure Pays Ransom to Retrieve Canvas User Data

Inside Higher Ed • 12 May 01:41

Instructure has paid a ransom to cybercriminals to recover compromised data from its Canvas learning management system, affecting approximately 275 million users across over 8,800 institutions.

Credibility 85% Manip. 15% Center
May 08, 2026
2 total
Cyberattack Disrupts Canvas Learning Platform, Affects Thousands of Schools
Cyberattack Disrupts Canvas Learning Platform, Affects Thousands of Schools

AP News • 08 May 21:16

A cyberattack on the Canvas learning management system disrupted access for thousands of educational institutions worldwide, impacting students and faculty during critical exam periods.

Credibility 90% Manip. 10% Center
Cyberattack on Canvas Disrupts Global Educational Institutions
Cyberattack on Canvas Disrupts Global Educational Institutions

BBC • 08 May 12:27

A cyberattack by the hacking group ShinyHunters compromised the Canvas learning management system, affecting thousands of educational institutions worldwide and exposing personal data of millions of users.

Credibility 90% Manip. 10% Center
May 07, 2026
1 total
ShinyHunters Breach Instructure's Canvas Platform, Exposing User Data
ShinyHunters Breach Instructure's Canvas Platform, Exposing User Data

The Daily Pennsylvanian • 07 May 21:12

Cybercriminal group ShinyHunters has breached Instructure's Canvas learning management system, compromising personal information of users across nearly 9,000 educational institutions worldwide.

Credibility 85% Manip. 10% Center