Climate
Privacy
Bob Dylan
Drones
Data Centers
AI Governance
2026 Maine Senate Race
Last Update: 08/01/2026 at 1:00 PM EST
Canvas Breach Data Deletion Deal
Coverage from NBC News, Yahoo Finance, and others
Articles
22
Active Days
70
The Topic
Instructure, the company behind Canvas, is responding to a breach in which an unauthorized actor accessed student-related data and later returned it under a reported agreement to delete remaining copies. The incident matters because Canvas is deeply embedded in school operations, so the breach caused access disruptions during finals and raised concerns about the potential exposure of student contact and message data. The reported involvement of ShinyHunters and the use of ransom-linked threats point to a broader extortion dynamic, even as the company says it has not seen evidence of passwords or financial data being compromised.
First Article: 05/08/26
Latest Article: 07/16/26
Summary
- Instructure says the actor behind the Canvas breach returned the stolen data and provided digital confirmation that remaining copies were destroyed.
- ShinyHunters claimed responsibility and used ransom-linked threats tied to a large set of schools and users.
- The breach disrupted Canvas access during finals, affecting students, faculty, and university workflows.
- Reportedly exposed data appears limited to student IDs, email addresses, names, and Canvas messages.
- Instructure says it found no evidence that passwords, birth dates, government IDs, or financial data were compromised.
- Schools affected by the outage issued precautionary guidance and continued monitoring while the investigation continued.
History
This topic is new, but as new articles are added to it this area will summarize shifts, changes and expansions of the issues.
Featured
05-12-2026
Instructure reported an agreement to delete Canvas breach data after ShinyHunters claimed access to data from thousands of schools and hundreds of millions of individuals.
05-12-2026
Instructure said it reached an agreement with ShinyHunters after the Canvas cyberattack, returned pilfered data, and received shred-log confirmation while keeping complete deletion certainty unavailable.
05-12-2026
Instructure announced an agreement with a hacking group tied to a Canvas breach potentially exposing up to 275 million students worldwide in 2024.
Timeline: 70 Days
Hover over any logo to see coverage summary, click for full article.
Additional Articles
⭐⭐⭐⭐⭐
Instructure reported a Canvas learning platform breach potentially affecting up to 275 million students worldwide, with an agreement involving ShinyHunters and unverified data deletion.
Instructure reported disruptions to Canvas after ShinyHunters claimed theft of large-scale school data, leading US institutions to negotiate to prevent publication.
Instructure reported an agreement with a ShinyHunters-linked actor after a Canvas cyberattack disrupted access during finals and exposed student identity and message data.
Instructure reported a settlement with an unauthorized actor after a Canvas data breach attributed to ShinyHunters, warning that exposed usernames and emails can enable phishing.
Instructure said it recovered and secured confirmation of destruction of Canvas data after a ShinyHunters cyberattack, while a federal lawsuit in Utah alleges inadequate protection.
Instructure said ShinyHunters demanded ransom for a Canvas breach affecting thousands of schools and 275 million individuals, and Instructure negotiated data return and deletion verification.
Instructure said it reached an agreement following a Canvas ransomware breach during finals, after ShinyHunters threatened large-scale data leaks.
Instructure reported an agreement to delete Canvas stolen data after ShinyHunters ransomware threats covered nearly 9,000 schools and 275 million individuals.
Instructure said a ShinyHunters cyberattack on Canvas led to temporary takedown, data return, and shred-log confirmation of destruction amid an ongoing Utah lawsuit.
Instructure reported agreement terms and deletion confirmation after ShinyHunters threatened a Canvas breach affecting thousands of schools during finals.
⭐⭐⭐
Instructure reported a Canvas cyberattack during finals in Utah, citing returned stolen data and shred-log destruction verification amid ransom demands.
Instructure ended the Canvas shutdown in May after a settlement with an unauthorized actor, following unauthorized access that threatened student data and disrupted finals at Idaho schools.
Instructure reported a resolution of a Canvas cyberattack during finals after a ShinyHunters ransom threat, citing returned data, shred-log destruction evidence, and ongoing forensic review.
Instructure reported a Canvas breach agreement in response to ShinyHunters ransomware threats as schools faced finals week disruptions.
Instructure said a Canvas cyberattack attributed to ShinyHunters led to a temporary shutdown and digital confirmation that stolen data copies were destroyed.
Seton Hall restored Canvas access after an Instructure cybersecurity incident tied to ShinyHunters ransom demands, with guidance on suspicious messages for students and faculty.
Instructure reported a Canvas cyberattack in which ShinyHunters claimed data exposure, while the company took the platform offline and verified alleged data destruction.
Instructure said a Canvas breach during finals involved student IDs and emails, after an agreement with ShinyHunters included data return and claimed deletion.
Instructure disclosed an unauthorized access incident to Canvas in education settings, after ShinyHunters claimed large-scale student data exposure and Instructure later confirmed deletion.