logo

ShinyHunters Claims Second Attack Against Instructure

ID: f4d121d8-ff9a-5bc7-9ec2-a0502ccc1079

STIX ID: report--f4d121d8-ff9a-5bc7-9ec2-a0502ccc1079

Feed Name: Dark Reading

Threat Score
90/100

Date Published: 2026-05-08

Date Updated: 2026-05-13

Author: Nate Nelson

...
...

Dark Reading reports that the ShinyHunters group allegedly breached Instructure's Canvas LMS, claiming roughly 3.65 TB of data from nearly 9,000 institutions (about 275 million individuals) and circulating ransom/extortion messages after an apparent follow-on compromise of free-for-teacher accounts; students and schools experienced outages and interrupted classes, particularly affecting minors, while Instructure stated it contained the incident, temporarily shut down impacted accounts, and later said it reached an agreement with the actor who returned data and provided digital confirmation of destruction.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.