ShinyHunters Hack Disrupts Canvas Learning Platform During Finals Week

The cybercriminal gang ShinyHunters has disrupted Canvas, a widely used online education system developed by Instructure, causing significant outages for thousands of schools during critical finals week. The attackers displayed an extortion note claiming responsibility for the breach and threatening to leak stolen data, including student names, email addresses, and ID numbers, unless a ransom is paid by May 12th. Although Instructure previously stated that Canvas was fully operational and unauthorized activity had ceased, ShinyHunters claims to have breached the system again after the company ignored their initial contact attempts. Major institutions such as Princeton, Penn State, and the University of British Columbia confirmed the outage, urging users to change passwords and avoid suspicious links. The timing has caused substantial academic disruption, with students and professors reporting issues accessing exams and course materials. While reports suggest ShinyHunters may have removed Instructure from their dark web leak site, implying a potential ransom payment, the incident highlights ongoing vulnerabilities in educational technology infrastructure. This attack follows recent high-profile breaches by the same group against companies like Vimeo and ADT, drawing increased scrutiny from law enforcement and cybersecurity experts regarding the group's tactics and impact.