Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak

Instructure (Canvas) was breached by the ShinyHunters extortion group, resulting in the theft of ~3.65 TB (≈275 million records) from almost 9,000 educational organizations. The attackers exploited an unspecified vulnerability in the Free-for-Teacher support-ticket system, defaced hundreds of login portals during a second wave, and demanded a ransom; Instructure negotiated an agreement, reports receiving the stolen data and confirmation of its destruction, and has taken remediation and mitigation steps while warning of heightened phishing risk to students, staff, and parents.