A crippling outage of the widely used educational platform, Canvas, has left students and educators grappling with uncertainty as the notorious hacking group ShinyHunters threatens to leak sensitive data affecting millions. This disruption follows a significant data breach confirmed by Instructure, the parent company of Canvas, which has reported unauthorized access to student names, email addresses, ID numbers, and private messages.
On Thursday, users attempting to log into the Canvas system were met with a stark message attributed to ShinyHunters, which stated: "ShinyHunters has breached Instructure (again). Instead of contacting us to resolve it, they ignored us and did some 'security patches.' If any of the schools in the affected list are interested in preventing the release of their data, please consult with a cyber advisory firm and contact us privately at TOX to negotiate a settlement. You have until the end of the day on May 12, 2026, before everything is leaked."
The message included alarming claims of 9,000 compromised schools and personal data from approximately 275 million students, teachers, and faculty. Instructure has since placed the entire Canvas suite—including Canvas Beta and Canvas Test—into maintenance mode as they scramble to rectify the situation. According to their status page, the company anticipates a swift recovery yet did not provide a timeline for when users can expect to regain access.
In response to the breach, Instructure announced that it had deployed security patches aimed at enhancing the robustness of its systems. However, ShinyHunters, infamous for previously targeting major corporations including Ticketmaster and AT&T, is presenting a distressing scenario for educational institutions amidst growing concerns over data security in the digital learning environment.
The potential fallout from this breach may have far-reaching implications as schools race to secure student information and mitigate reputational damage. As parents, students, and educators await clarity on the extent of the breach and possible recovery strategies, the urgency for effective cybersecurity measures in educational technology has never been more evident.
For ongoing updates, check back regularly as Instructure provides further information on the situation.
Source: The Verge
Source: The Verge
