Instructure hacker claims data theft from 8,800 schools, universities

Instructure disclosed a data breach allegedly carried out by the ShinyHunters extortion group, which claims to have stolen 280 million records across 8,809 colleges, school districts, and education platforms. The actor published lists and per-institution record counts and says the data was harvested via Canvas export features and APIs, exposing names, emails, private messages, and enrollment information.