Canvas Cyberattack Compromises Data of 72,000 in Hong Kong
A global cyberattack on the online learning platform Canvas has compromised the personal information of over 72,000 students and staff at seven educational institutions in Hong Kong. The Office of the Privacy Commissioner for Personal Data (PCPD) confirmed that the breach is part of a wider incident affecting nearly 9,000 institutions and 275 million users worldwide. Affected local entities include major universities such as City University of Hong Kong, Polytechnic University, and HKUST, along with several arts and construction institutes. The hacker group ShinyHunters allegedly demanded ransom from Canvas developer Instructure, which claimed to have reached an agreement to prevent public data leaks. However, local reports indicate that names, email addresses, student IDs, and messages may have been exposed. Cybersecurity officials have urged institutions to suspend platform use and remain vigilant against subsequent phishing attacks. The Hong Kong Computer Emergency Response Team is utilizing AI tools to identify related malicious websites, while police have received reports regarding the hack and associated fraud attempts.
Editorial responsibility
- No named human review is recorded for this page.
- Reports are grouped by semantic similarity and deterministic rules. Language models may assist titles, summaries, translation and cross-source analysis; the page itself is projected from evidence records.
- Current automated evidence projection