ShinyHunters Defaces Canvas LMS Portal, Hundreds of Universities Affected

ShinyHunters allegedly breached Instructure/Canvas and publicly defaced university login portals with extortion demands, claiming to have exfiltrated 3.65TB of data affecting nearly 9,000 institutions and ~275 million users. Instructure has confirmed unauthorized access to certain user data (names, emails, student IDs, internal messages) but not to passwords or financial/government ID data; the incident disrupted access to coursework and prompted warnings about follow-on phishing and data exposure while investigations continue.