Canvas Owner Instructure Secures Student Data in Deal with ShinyHunters Hackers
Instructure, the US parent company of the popular learning management system Canvas, announced it has reached an agreement with the ShinyHunters hacking group following a significant data breach. The hackers had stolen approximately 6.65 terabytes of data, including usernames, email addresses, course details, and messages from nearly 9,000 schools worldwide. ShinyHunters had previously threatened to release this information unless ransoms were paid by educational institutions. Instructure confirmed that the stolen data has been returned and received digital confirmation of its destruction, ensuring no customers will face extortion. CEO Steve Daly apologized for the disruption, which affected universities during final exam periods, causing some institutions like the University of Massachusetts at Dartmouth to postpone exams. Despite the breach, Instructure asserts that the Canvas platform remains fully operational and safe for use. The incident highlights ongoing cybersecurity vulnerabilities in the education sector, with ShinyHunters, a group reportedly composed of young adults from the US and UK, also linked to previous high-profile attacks such as the one on Ticketmaster.
Editorial responsibility
- No named human review is recorded for this page.
- Reports are grouped by semantic similarity and deterministic rules. Language models may assist titles, summaries, translation and cross-source analysis; the page itself is projected from evidence records.
- Current automated evidence projection