ShinyHunters’ Instructure Canvas LMS and Vimeo Breaches Impact Millions of Users

**Executive summary:** ShinyHunters reportedly exfiltrated ~3.65 TB of data from Instructure/Canvas (approximately 275 million records impacting ~15,000 institutions, including private messages and student identifiers) and accessed Vimeo data by stealing Anodot authentication tokens in a supply‑chain style attack affecting about 119,000 accounts; both vendors are investigating, revoking credentials, and engaging law enforcement while attackers issued extortion threats.