Canvas

As artificial intelligence becomes more integrated into enterprise operations, companies face escalating security challenges in managing autonomous and interconnected systems. The industry is shifting focus from merely protecting models and data to securing AI agents that can act independently across workflows. OpenAI recently launched 'Daybreak,' a cybersecurity initiative involving partners like Cisco, CrowdStrike, and Cloudflare, aimed at building resilience into AI systems rather than relying on reactive defenses. This move highlights the growing recognition that traditional security measures are inadequate for operational AI. Recent breaches, such as those affecting the Canvas ed-tech platform, underscore the difficulties organizations face in managing connected systems. Furthermore, the rapid adoption of AI tools outpaces workforce training and infrastructure readiness, creating governance gaps. Major tech firms like Google Cloud are responding by hiring specialized AI deployment engineers, while Nvidia and Anthropic expand their market reach. The article emphasizes that securing AI at scale requires new observability tools and robust operational frameworks, marking a critical phase in enterprise AI deployment where safety and reliability are paramount amidst increasing autonomy.

1 reports · 1 sources

This week saw significant cybersecurity disruptions, headlined by the massive ransomware attack on Canvas, an online learning platform used by over 9,000 schools. The breach locked users out during finals, prompting parent company Infrastructure to pay the hacker group ShinyHunters to restore services and delete stolen data. This decision has drawn criticism for encouraging future ransomware crimes and may not prevent impending class-action lawsuits. In artificial intelligence security, researchers identified hackers using AI to discover zero-day vulnerabilities, though Google successfully intervened to patch a targeted flaw. Meanwhile, Microsoft developed an internal AI model that rapidly identified numerous Windows vulnerabilities. Additionally, a concerning trend emerged where AI chatbots, including Google's Gemini, are inadvertently disclosing individuals' private phone numbers and personal information when prompted, leading to a surge in privacy removal requests. These incidents highlight growing challenges in digital security, ranging from corporate ransomware responses to the unintended privacy risks posed by large language models trained on public data.

1 reports · 1 sources

Hong Kong’s Office of the Privacy Commissioner for Personal Data (PCPD) has strongly advised against paying ransoms to hackers following a significant cyberattack on the education management platform Canvas. The breach compromised the personal data of approximately 72,000 students and staff across seven local institutions, including names, email addresses, and student IDs. Privacy Commissioner Ada Chung condemned the potential payment of ransoms, arguing that such practices fund illegal activities and do not guarantee data safety. She warned that yielding to extortion could signal vulnerability to other cybercriminals. The incident is part of a broader global attack orchestrated by the hacker group ShinyHunters, which affected nearly 9,000 educational institutions worldwide and involved 3.5 terabytes of data from 275 million users. While Instructure, the developer of Canvas, confirmed an agreement with the hackers, it remains unclear if a ransom was paid. ShinyHunters claimed to have deleted the stolen data. Currently, there is no evidence of public data leaks. The PCPD advises organizations using Canvas to enhance system protections and remove sensitive information while Instructure completes its incident review.

1 reports · 1 sources

Hong Kong’s Privacy Commissioner for Personal Data, Ada Chung Lai-ling, has strongly criticized Instructure, the parent company of the education platform Canvas, for paying a ransom to hackers following a massive data breach. The incident compromised personal data across 9,000 institutions globally, including seven organizations in Hong Kong affecting over 72,000 individuals. Chung argued that the funds used for the ransom should have been invested in strengthening cybersecurity measures instead. She also expressed skepticism regarding the hackers' claim that all stolen data was returned and destroyed, urging affected users to remain vigilant against potential phishing attempts or suspicious communications. Although Instructure stated that an agreement was reached and digital confirmation of data destruction was received, the watchdog emphasized that rewarding illegal activities is inappropriate. This marks the second time the platform has suffered a significant security breach. The commissioner highlighted the need for better protective infrastructure rather than capitulating to criminal demands, raising concerns about the long-term security implications for users worldwide.

1 reports · 1 sources

Instructure, the education technology company behind Canvas, recently announced an agreement with the ShinyHunters cybercrime group following a massive data breach affecting approximately 275 million students, teachers, and staff. The company assured users that stolen private chats and email addresses were destroyed, citing digital confirmation from the attackers. However, cybersecurity experts and threat intelligence analysts strongly dispute this claim. Specialists from Recorded Future and the Halcyon Ransomware Research Center argue that ransomware groups rarely delete data permanently, often recycling it for future extortion or phishing campaigns. They describe Instructure's assurance as part of a 'Ransomware Trust Paradox,' where criminals maintain a facade of integrity to ensure future payments while likely retaining copies of the data. Experts predict targeted phishing attacks against the educational community in the coming year using the leaked information. Although Instructure did not explicitly confirm a ransom payment, industry insiders estimate the settlement ranged between $5 million and $30 million. This incident highlights the difficult operational decisions institutions face during critical periods like finals week, despite FBI recommendations against paying ransoms.

1 reports · 1 sources

Edtech company Instructure paid a ransom to the ShinyHunters cybercrime group following two major data breaches of its Canvas learning platform. The attacks compromised 275 million records from nearly 9,000 educational institutions globally, exposing names, emails, and private messages. While Instructure secured digital proof of data destruction to prevent further extortion, the incident triggered service disruptions, class-action lawsuits, and a US Congressional investigation into the company’s cybersecurity failures and decision to negotiate with hackers.

10 reports · 9 sources · Updated May 16, 06:00 PM UTC

A university professor and blogger, writing for a Big Ten-focused sports blog, shares a personal anecdote about detecting academic dishonesty during finals week. Frustrated by student performance and the pervasive use of artificial intelligence in higher education, the instructor describes returning to in-person, typed exams on the Canvas learning platform. Suspicious of unusually detailed answers regarding historical figures like Walter Warfield Waters, the professor examined Canvas activity logs. The data revealed that students were clicking away from the exam interface, likely to search for answers online, despite the exam being timed. The professor issued a stern warning to students, emphasizing that digital platforms track user behavior and can expose cheating attempts. The narrative blends this academic integrity issue with broader criticisms of modern university administration, rising costs, and the perceived decline in student critical thinking skills within Big Ten institutions. The article serves as both a cautionary tale for students relying on technology to cheat and a critique of educational policies that fail to support faculty in maintaining rigorous academic standards.

1 reports · 1 sources

Cybersecurity experts have criticized Instructure, the company behind the Canvas learning platform, for reaching an agreement with the ShinyHunters hacking group following a massive data breach. The incident compromised personal information of approximately 275 million users across 9,000 educational institutions in countries including the US, Australia, Canada, and New Zealand. While Instructure claims the deal resulted in the return and destruction of stolen data, reports suggest a ransom of around US$10 million may have been paid. Experts warn that paying ransoms marks organizations as easy targets, potentially adding them to criminal 'sucker lists' for future extortion attempts. Australia’s National Cyber Security Coordinator emphasized that cybercriminals cannot be trusted, noting that payments do not guarantee data recovery or prevent leaks. Furthermore, verifying the complete deletion of copied data is nearly impossible. The breach has already triggered multiple lawsuits against Instructure’s owner, KKR. Authorities and academics argue that such payments reinforce criminal business models and increase the risk of subsequent attacks by both original perpetrators and copycats, urging organizations to resist negotiation despite the immediate pressure.

1 reports · 1 sources

Following a massive security breach affecting over 9,000 educational institutions, Canvas, a widely used learning management system, reached a settlement agreement with the attackers. This deal reportedly involves the return of stolen student data, including usernames and enrollment details, in exchange for potential ransom payments by its parent company, Instructure. The article argues that this decision sends a dangerous message to cybercriminals, suggesting that crime pays if executed correctly. By negotiating with hackers, Canvas risks turning ransomware into a predictable and profitable business model. Experts warn that paying ransoms rarely resolves underlying security issues and often encourages further attacks, as there is no guarantee hackers will honor their agreements or delete stolen data. Instead of capitulating, organizations are urged to invest in privacy-first tools and professional security measures to prevent future incidents. With ransomware attacks rising significantly, particularly targeting smaller organizations, this case highlights the critical need for robust cybersecurity strategies rather than reactive payments that may exacerbate long-term vulnerabilities and expose users to continued threats like phishing and extortion.

1 reports · 1 sources

In this opinion piece for Dagens Nyheter, Christian Schenholm from cybersecurity firm Integrity 360 argues that the true cost of IT attacks extends far beyond monetary damages. While public discourse often focuses on financial losses and data volumes, the severe psychological and emotional impact on employees is frequently overlooked. Staff members face intense pressure, working non-stop to resolve technical crises and manage upset customers, leading to burnout, insecurity, and increased resignation rates post-incident. The article highlights that human error remains a significant risk factor, necessitating regular staff training in cyber hygiene. Schenholm cites recent major incidents, including the 2025 attack on Miljödata which exposed sensitive information of over one million Swedes, and breaches affecting Swedish universities via the Canvas platform. These events illustrate how cyberattacks create long-lasting consequences, such as identity theft risks and physical danger for those with protected identities. Furthermore, attacks on third-party suppliers like Tietoevry demonstrate the broader societal ripple effects. The author concludes that rebuilding brand trust places additional emotional strain on workers, making cyber security a critical human resources and societal issue, not just a technical challenge.

1 reports · 1 sources

Steve Daly, the CEO of educational technology company Instructure, has been summoned to testify before the US House Committee on Homeland Security regarding a significant cybersecurity breach affecting its Canvas learning platform. The hearing, scheduled for May 21, 2026, will address the details of two separate attacks by the hacker group ShinyHunters, which compromised data belonging to approximately 275 million individuals, including students and staff at major universities like Harvard and MIT. Key topics of discussion will include the volume of stolen data, containment measures, customer notification processes, and the controversial decision by Instructure to pay a ransom to the attackers. This congressional scrutiny highlights growing legislative concern over cybersecurity failures in the education sector and the implications of paying ransoms to cybercriminal groups. The breach initially surfaced in early May 2026, leading to widespread disruption for schools and raising serious questions about data protection protocols within major edtech providers.

1 reports · 1 sources

Instructure, the operator of the widely used educational learning platform Canvas, has agreed to pay a ransom to cybercriminals following a significant data breach. The attack, which occurred last week, paralyzed the platform's services globally, forcing approximately 8,000 educational institutions to postpone courses and denying students access to their learning materials. The hackers threatened to publish sensitive data belonging to 275 million users if their demands were not met. Just before the deadline on Monday, Instructure capitulated to the extortion attempt to prevent the mass release of user information. Canvas is a critical infrastructure for many prestigious universities, including Ivy League institutions like Columbia University in New York City. This incident highlights the growing vulnerability of educational technology providers to sophisticated ransomware attacks and the difficult decisions companies face when balancing financial costs against user privacy and data security. The disruption had immediate operational impacts on schools worldwide, underscoring the platform's extensive reach and dependence in the modern education sector.

1 reports · 1 sources

U.S. House lawmakers are demanding that Instructure, the education technology company behind the Canvas learning platform, testify regarding two recent cyberattacks that compromised the personal data of millions of students worldwide. The House Homeland Security Committee, led by Representative Andrew Garbarino, is investigating how hackers repeatedly breached Instructure’s systems and exploited the same vulnerability to steal sensitive information and deface school login pages. The committee seeks details on the types of data stolen, the company’s incident response capabilities, and its coordination with the Cybersecurity and Infrastructure Security Agency (CISA). Instructure recently confirmed it reached an agreement with the ShinyHunters hacker group, who claimed to have deleted the stolen data, though ransom amounts remain undisclosed. Security experts criticize this approach, warning that paying ransoms funds future attacks and does not guarantee data deletion. Garbarino highlighted serious concerns about Instructure’s inability to contain the threat after the initial intrusion, emphasizing the systemic vulnerabilities in educational technology infrastructure. As of now, Instructure has not confirmed whether CEO Steve Daly or other executives will comply with the request to testify before the committee.

1 reports · 1 sources

In this commentary for Dagens Nyheter, journalist Linus Larsson argues that paying ransomware demands is a deeply flawed strategy, despite recent actions by Swedish universities. The article highlights a recent incident where Instructure, a platform provider for approximately 30 Swedish universities, reportedly paid the hacker group Shiny Hunters to prevent the leak of 275 million users' data. Larsson contends that such payments effectively funnel money from educational institutions to organized crime. He outlines two primary reasons why this approach is detrimental. Ethically, it sustains criminal enterprises by proving that cyberextortion is profitable, thereby encouraging future attacks. Practically, there is no guarantee that paying stops the data leak, as hackers may retain copies or forge deletion logs. The author suggests that any restraint shown by hackers after payment is merely a reputational tactic to ensure future victims comply, rather than a genuine commitment to security. Ultimately, Larsson asserts that while immediate crisis management might seem to justify payment, it perpetuates a cycle of digital crime with long-term negative consequences for society and institutional integrity.

1 reports · 1 sources

Education technology company Instructure has reached a controversial agreement with the hacker group ShinyHunters to recover customer data stolen during a recent cyberattack. The breach, which targeted Instructure's Canvas learning management system, potentially exposed the personal information, including names, email addresses, and private messages, of approximately 280 million users. ShinyHunters, known for previous high-profile attacks on companies like Rockstar and Nvidia, had threatened to leak the exfiltrated data if Instructure did not comply with their demands by a May 12 deadline. Instructure confirmed that the stolen data has been returned and received digital confirmation of its destruction, along with assurances that no customers would be extorted. However, the company defied explicit guidance from the FBI, which advises against paying ransoms to cybercriminals as it fuels further criminal activity and offers no guarantee of data recovery or safety. While Instructure stated this action was taken to provide peace of mind to its users, the specific financial terms of the deal remain undisclosed. This incident highlights the ongoing dilemma organizations face when balancing official law enforcement recommendations with the immediate pressure to protect sensitive user data from public exposure.

1 reports · 1 sources

Instructure, the educational technology company behind the widely used learning management system Canvas, has reportedly reached a settlement or deal with the cybercriminals responsible for a significant data breach. The hackers had previously claimed to have exfiltrated sensitive data associated with nearly 9,000 educational institutions and approximately 275 million individuals globally. This massive scale of potential data exposure highlights severe cybersecurity vulnerabilities within the ed-tech sector. The agreement marks a critical development in the aftermath of the intrusion, aiming to mitigate further damage or secure the return of stolen information. While specific terms of the deal remain undisclosed, the incident underscores the growing threat of ransomware and data theft targeting large-scale digital platforms serving students and educators. The breach has raised serious concerns regarding data privacy and the security measures employed by major technology providers in the education industry. This event serves as a stark reminder of the risks faced by organizations managing vast amounts of personal user data.

1 reports · 1 sources

Instructure, the company behind the Canvas online learning platform, announced it reached an agreement with hackers to delete stolen data following a significant cyberattack. The breach, claimed by the group ShinyHunters, forced the platform offline on May 7 during final exams for thousands of schools and universities, including the University of Minnesota. The attackers reportedly accessed data concerning 275 million people across nearly 9,000 institutions and had threatened to leak it unless a ransom was paid. While Instructure confirmed the agreement, it did not disclose whether a ransom was paid or identify the specific actors involved. This incident highlights growing cybersecurity vulnerabilities in educational technology infrastructure. The news report also briefly covers unrelated local Minnesota stories, including scrutiny of state employee awards, a nurses' strike authorization, and a new drone police pilot program, but the primary focus remains on the resolution of the high-profile Canvas security breach and its impact on the academic community.

1 reports · 1 sources

In a significant development regarding cybersecurity and educational technology, hackers involved in a recent data breach have agreed to delete stolen information belonging to the Canvas learning management system. This agreement marks a potential resolution to the incident, which had raised serious concerns about the privacy and security of student and institutional data hosted on the platform. While specific details regarding the ransom demands or the verification process for the data deletion remain limited in this brief report, the commitment from the threat actors suggests a de-escalation of the immediate crisis. Canvas, widely used by schools and universities globally, faces ongoing scrutiny over its ability to protect sensitive user information against sophisticated cyberattacks. This event highlights the persistent vulnerabilities in digital education infrastructure and the complex negotiations that often occur behind the scenes in ransomware incidents. Stakeholders, including educational institutions and affected individuals, will likely monitor the situation closely to ensure that the data is indeed destroyed and that no copies remain in circulation. The incident serves as a stark reminder of the critical need for robust cybersecurity measures in the education sector to prevent future breaches and safeguard personal information from malicious actors seeking financial gain or leverage.

1 reports · 1 sources

Ritholtz Wealth Management, a registered investment advisor managing $7.6 billion in assets, has announced the launch of a new equity separately managed account (SMA) strategy named Porterhouse. Developed in exclusive partnership with Franklin Templeton, this strategy is designed to complement Ritholtz’s existing asset allocation models. The Porterhouse strategy utilizes Franklin Templeton’s Canvas platform to actively manage portfolios through a quantitative process. It targets leading large-cap stocks within the Russell 1000 index by applying screens for strong price momentum and robust business fundamentals, such as earnings and cash flow. Inspired by CEO Joshua Brown’s investment philosophy, the approach focuses on concentration rather than diversification, aiming to hold only the highest-quality leading stocks. The model features dynamic flexibility, allowing it to increase concentration during favorable market conditions or shift assets into short-term Treasuries when qualifying opportunities are scarce. Portfolio manager Michael Batnick emphasized the strategy's disciplined yet flexible nature. This launch underscores the longstanding collaborative relationship between Ritholtz and Franklin Templeton, bringing a distinctive, research-backed investment option exclusively to Ritholtz clients.

1 reports · 1 sources

Instructure, the parent company of the educational platform Canvas, has reached an agreement with the hacking group ShinyHunters following a significant data breach. The deal ensures the return of stolen student and school data, digital confirmation of its destruction, and a commitment that no customers will face extortion. This resolution comes after ShinyHunters claimed to have stolen sensitive information, including names and messages, from nearly 9,000 schools. While Instructure stated the situation is resolved, cybersecurity experts suggest a ransom payment was likely made, highlighting the complex ethical dilemmas companies face during such incidents. The breach prompted temporary service interruptions and raised concerns among affected educational institutions. Additionally, the U.S. House Homeland Security Committee has requested a briefing from Instructure’s CEO regarding the intrusion, the extent of the data theft, and the company’s coordination with federal law enforcement agencies like CISA. This incident underscores ongoing vulnerabilities in educational technology infrastructure and the persistent threat posed by organized cybercriminal groups targeting large-scale data repositories for financial gain.

1 reports · 1 sources

Instructure, the parent company of the online learning platform Canvas, has reached an agreement with the cybercriminal gang ShinyHunters following a massive data breach affecting approximately 275 million users globally. The attack compromised personal data from 8,809 educational institutions, including over 120 in Australia such as the University of Melbourne and various state education departments. While Instructure did not explicitly confirm a ransom payment, it stated that stolen data was returned along with digital proof of deletion. Cybersecurity experts estimate the ransom likely ranged in the high single-digit millions of dollars, against an initial demand of $13 million. The breached data includes student IDs, names, email addresses, and private messages, though financial information and passwords were reportedly untouched. Former Australian cyber tsar Alastair MacGibbon criticized the move, suggesting the agreement implies a paid ransom and warning that criminal assurances regarding data deletion are often unreliable. This incident represents one of the largest breaches in the education sector, raising significant concerns about data privacy and the justification of paying ransoms to cybercriminals.

1 reports · 1 sources

New Zealand universities have announced assessment extensions for students after a significant global cyber attack disrupted the widely used learning management system, Canvas. The incident caused widespread delays in academic assessments and raised serious concerns regarding data security among educational institutions worldwide. According to reports from Stuff NZ, the Canvas platform has since been restored following negotiations that resulted in an agreement to delete stolen student data. This resolution aims to mitigate the privacy risks associated with the breach. The hack impacted universities globally, forcing administrative adjustments and causing significant inconvenience to students facing deadline pressures. The restoration of services marks a critical step in normalizing academic operations, though the incident highlights the vulnerability of digital education infrastructure to sophisticated cyber threats. Institutions are likely to review their cybersecurity protocols in the wake of this event. The focus remains on supporting affected students through extended deadlines while ensuring the integrity and confidentiality of their personal information is maintained following the negotiated data deletion deal with the attackers.

1 reports · 1 sources

A global cyberattack on the online learning platform Canvas has compromised the personal information of over 72,000 students and staff at seven educational institutions in Hong Kong. The Office of the Privacy Commissioner for Personal Data (PCPD) confirmed that the breach is part of a wider incident affecting nearly 9,000 institutions and 275 million users worldwide. Affected local entities include major universities such as City University of Hong Kong, Polytechnic University, and HKUST, along with several arts and construction institutes. The hacker group ShinyHunters allegedly demanded ransom from Canvas developer Instructure, which claimed to have reached an agreement to prevent public data leaks. However, local reports indicate that names, email addresses, student IDs, and messages may have been exposed. Cybersecurity officials have urged institutions to suspend platform use and remain vigilant against subsequent phishing attacks. The Hong Kong Computer Emergency Response Team is utilizing AI tools to identify related malicious websites, while police have received reports regarding the hack and associated fraud attempts.

1 reports · 1 sources

Instructure, the developer of the widely used Canvas learning management system, has confirmed it reached an agreement with cybercriminals who stole 3.5 terabytes of student and university data. The company stated that its primary motivation was protecting the privacy of students and education staff. Under the undisclosed terms, the stolen data was returned to Instructure, and the company received digital confirmation that the information was destroyed. Additionally, the hackers agreed not to extort any affected customers, covering all institutions involved without requiring individual engagement. However, this decision contradicts advice from global law enforcement agencies, which warn that paying ransom fuels further attacks and offers no guarantee of data deletion. Reports highlight previous instances, such as the LockBit ransomware case, where criminals accepted payments but retained data for resale. Despite these risks, Instructure argued that taking every possible step within their control was necessary to provide peace of mind to their customers. The incident underscores the ongoing challenges educational technology providers face in securing sensitive user information against sophisticated cyber threats.

1 reports · 1 sources

Instructure, the US parent company of the popular learning management system Canvas, announced it has reached an agreement with the ShinyHunters hacking group following a significant data breach. The hackers had stolen approximately 6.65 terabytes of data, including usernames, email addresses, course details, and messages from nearly 9,000 schools worldwide. ShinyHunters had previously threatened to release this information unless ransoms were paid by educational institutions. Instructure confirmed that the stolen data has been returned and received digital confirmation of its destruction, ensuring no customers will face extortion. CEO Steve Daly apologized for the disruption, which affected universities during final exam periods, causing some institutions like the University of Massachusetts at Dartmouth to postpone exams. Despite the breach, Instructure asserts that the Canvas platform remains fully operational and safe for use. The incident highlights ongoing cybersecurity vulnerabilities in the education sector, with ShinyHunters, a group reportedly composed of young adults from the US and UK, also linked to previous high-profile attacks such as the one on Ticketmaster.

1 reports · 1 sources

Dutch educational institutions continue to face frequent cyber attacks, with experts labeling them as inevitable targets due to the valuable data they hold. The recent hack of Canvas, a widely used educational platform, disrupted operations at Eindhoven University of Technology (TU/e) and other institutions, stealing personal data of 275 million users. This incident follows a pattern of attacks, including a 2025 breach at TU/e and ransomware incidents at Maastricht University and ROC Mondriaan. While SURF, the ICT cooperative for Dutch higher education, notes that education is not attacked more frequently than other sectors, Professor Harald Vranken highlights the inherent asymmetry in cybersecurity: defenders must secure all vulnerabilities, whereas attackers need only exploit one. The stolen data, comprising names, emails, and student records, is particularly attractive for future phishing campaigns targeting prospective highly educated individuals. Despite the severity, students often view these disruptions as merely annoying, though academic schedules are significantly impacted. The recurring nature of these breaches underscores the persistent vulnerability of the education sector to sophisticated cybercrime groups like Shinyhunters.

1 reports · 1 sources

Instructure’s Canvas platform suffered a major cyberattack by the ShinyHunters group, disrupting final exams for millions of students across nearly 9,000 educational institutions globally. The breach exploited a vulnerability in free teacher accounts, exposing sensitive data like names, emails, and private messages for approximately 275 million users. While core credentials remained secure, the incident caused widespread academic chaos and triggered multiple class-action lawsuits. Instructure ultimately reached a controversial agreement with the hackers to retrieve and destroy the stolen data, highlighting critical vulnerabilities in educational technology infrastructure.

21 reports · 18 sources · Updated May 12, 04:35 PM UTC

Ritholtz Wealth Management, a national registered investment advisor with $7.6 billion in assets under management, has launched its first equity-only separately managed account (SMA) in partnership with Franklin Templeton. Named Porterhouse, this actively managed strategy focuses on high-performing large-cap stocks and will be available exclusively to qualified Ritholtz clients starting June 1. The strategy employs a monthly screening process of the top 50% of the Russell 1000 Index, targeting companies with strong earnings, cash flows, momentum, and quality metrics. This approach allows the portfolio to concentrate capital in high-conviction names or shift funds into short-term Treasuries when fewer stocks meet the criteria, potentially reducing stock holdings to zero during prolonged market downturns. Michael Batnick, managing partner at Ritholtz, emphasized the focus on fundamentally sound businesses rather than speculative stocks. Josh Brown, co-founder and CEO, likened the strategy to ordering a premium cut at a steakhouse, highlighting the intent to focus on leading stocks without dilution. The SMA is supported by Franklin Templeton’s Canvas platform for tax-aware portfolios, marking a continuation of the firms' decade-long relationship following Ritholtz's earlier launch of the Goaltender ETF.

1 reports · 1 sources

Instructure, the developer of the widely used Canvas Learning Management System (LMS), suffered a significant cybersecurity breach attributed to the extortion group ShinyHunters. The attack, which exploited a vulnerability in the platform's 'Free-For-Teacher' service, resulted in the theft of 3.65 terabytes of data affecting approximately 275 million students, teachers, and staff across 8,809 educational institutions globally. While Instructure stated that sensitive financial information and passwords were not compromised, personal details such as names, email addresses, and student IDs were exposed. ShinyHunters threatened to leak the data and defaced login pages of hundreds of institutions, causing widespread disruption to academic activities, including exam postponements at universities like Penn State and Idaho State. The incident highlights critical vulnerabilities in educational technology infrastructure and the risks of centralized data systems. Experts warn of potential follow-on phishing campaigns targeting affected communities. Despite Instructure's efforts to patch security flaws and revoke access tokens, the breach has sparked panic among users and raised serious concerns about data privacy and institutional resilience in the education sector.

1 reports · 1 sources

Instructure, the parent company of the educational platform Canvas, has reached an agreement with the hacking group ShinyHunters following a significant data breach. Announced on May 11, 2026, the deal ensures the return of all stolen student and school data to the company, accompanied by digital confirmation of its destruction. Crucially, the agreement stipulates that no Instructure customers will face extortion attempts, either publicly or privately, regarding this incident. A representative for ShinyHunters confirmed to Reuters that the data has been deleted and that the company and its users will not be targeted for payment. This resolution covers all impacted customers, eliminating the need for individual engagements with the hackers. Despite this settlement, regulatory scrutiny persists. The US House Homeland Security Committee has requested a briefing from Instructure CEO Steve Daly to address the multiple intrusions, the extent of the data theft, the company's response measures, and its coordination with federal agencies like CISA. Instructure has not yet commented on the congressional request or the specific terms of the agreement with the hacking group.

1 reports · 1 sources