logo

Stolen Canvas data was “returned” after hacker agreement, Instructure says

ID: 8c42a121-c8f8-5f86-bb3f-d940c8ea7ee2

STIX ID: report--8c42a121-c8f8-5f86-bb3f-d940c8ea7ee2

Feed Name: Security Boulevard

Threat Score
75/100

Date Published: 2026-05-12

Date Updated: 2026-05-12

Author: Malwarebytes

...
...

The Malwarebytes blog summarizes an Instructure/Canvas data breach attributed to extortion group ShinyHunters that exposed millions of students' names, email addresses, course information, enrollment data, and private messages; Instructure reportedly reached an agreement with the actor and stated the data was "returned," while the article cautions that copies may persist and continue to fuel targeted phishing and social-engineering attacks.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.