Climate
Privacy
Bob Dylan
Drones
Data Centers
AI Governance
2026 Maine Senate Race
Last Update: 08/01/2026 at 1:00 PM EST
Canvas Breach Fallout
Coverage from CBS News, Wxxv25, and others
Articles
30
Active Days
6
The Topic
Instructure is dealing with the fallout from a breach affecting Canvas, the learning platform used by schools and universities worldwide. The incident disrupted access during finals, prompted claims from ShinyHunters about stolen student data, and led Instructure to say it reached an agreement for the data to be deleted, though it cannot verify permanent destruction. The case matters because it combines operational disruption, possible exposure of student and school information, and continuing uncertainty about whether exfiltrated data will be reused or leaked.
First Article: 05/08/26
Latest Article: 05/13/26
Summary
- Instructure temporarily took Canvas offline while investigating a breach that affected students and faculty during finals.
- ShinyHunters claimed responsibility and said it had stolen data tied to thousands of schools and hundreds of millions of people.
- Instructure said it reached an agreement with the actor and received digital confirmation that remaining copies were destroyed, but it cannot verify permanent deletion.
- The exposed material appears to include names, email addresses, student ID numbers, course-related messages, and enrollment information.
- No evidence has been reported that passwords, financial data, government IDs, or dates of birth were compromised.
- Schools and universities are monitoring for phishing and impersonation attempts using exposed information.
- The incident has also drawn legal scrutiny, with a federal lawsuit alleging inadequate protection of the platform.
History
This topic is new, but as new articles are added to it this area will summarize shifts, changes and expansions of the issues.
Featured
05-12-2026
Instructure reported after a Canvas breach that data was returned and destroyed indicators were provided, following ransomware-related threats from ShinyHunters.
05-12-2026
Instructure reported a post-breach agreement to delete stolen Canvas data after a ShinyHunters ransomware incident disrupted schools during finals.
05-12-2026
Instructure said Canvas was taken offline during finals after a ShinyHunters breach, with returned data and claimed deletion following an agreement.
Timeline: 6 Days
Hover over any logo to see coverage summary, click for full article.
Additional Articles
⭐⭐⭐⭐⭐
Instructure said Canvas reached an agreement with ShinyHunters after a cyberattack, including returned data and shred-log confirmation, while keeping the platform offline.
Instructure, during finals week, restored Canvas access after a ShinyHunters ransomware breach threat covering nearly 9,000 schools and 275 million individuals.
Instructure said an agreement after a Canvas cyberattack returned data and claimed destruction, following ShinyHunters ransom threats affecting schools worldwide.
Instructure reported a Canvas breach agreement with ShinyHunters after a ransomware attack disrupted students in finals week in the United States.
Instructure reported a Canvas ransomware incident during finals, citing an agreement to return and destroy stolen data after ShinyHunters threatened large-scale student record leaks.
Instructure announced an agreement with the unauthorized actor behind the Canvas learning platform breach, affecting up to 275 million students worldwide, after activity began April 29 and continued into early May.
Instructure disclosed Canvas infiltrations in April and May and an agreement involving returned stolen data after a ShinyHunters cyberattack, triggering federal class actions.
Instructure agreed with an unauthorized actor after a Canvas platform breach that potentially exposed student personal data for up to 275 million learners worldwide.
Instructure reported a Canvas hacker agreement after finals-week disruption, including returned data and deletion confirmation via shred logs.
Instructure took Canvas offline in a cyberattack investigation after ShinyHunters threatened to leak student data tied to thousands of schools.
Instructure said stolen Canvas data was returned after ShinyHunters claimed a ransomware-style cyberattack involving student identifiers and messaging.
Instructure reached an agreement with ShinyHunters after a April 29 Canvas breach exposed student and school-system data and disrupted final exams, according to company and FBI statements.
Instructure took Canvas offline after a ShinyHunters ransom-linked breach threatened student data exposure and triggered a Utah federal lawsuit.
Instructure reported a ransomware agreement after a Canvas breach disrupted student access during finals, amid ShinyHunters leak threats and Utah lawsuit scrutiny.
Instructure said a Canvas cyberattack agreement included data return and shred-log destruction confirmation after ShinyHunters threatened to leak student data.
Instructure said it reached an agreement with Canvas hackers after a ShinyHunters breach threatened data leaks affecting about 9,000 schools during final exams.
Instructure said Canvas restored access after a ShinyHunters breach and reported agreement-based data deletion following a temporary platform shutdown.
Instructure, during 2020s, described a Canvas breach agreement with ShinyHunters to delete stolen data after ransom threats and temporary shutdown.
⭐⭐⭐
Instructure restored Canvas after a cyberattack, describing student ID, email, name, and message exposure claims while forensic review found no ongoing threat-actor access.
UChicago restored Canvas access after an Instructure-linked breach claim by ShinyHunters, while ongoing checks focused on possible student account data exposure and phishing risk.
Instructure reported alleged shred-log confirmed deletion after a Canvas cyberattack claimed by ShinyHunters disrupted schools during finals week.
Instructure said an agreement was reached after ShinyHunters disrupted Canvas during finals and threatened to leak data on thousands of schools and hundreds of millions of individuals.
Instructure reported a ransomware-related breach of Canvas during finals week and said data deletion was negotiated with ShinyHunters, affecting nearly 9,000 schools.
Instructure, responding to a ShinyHunters cyberattack on Canvas, reported returned stolen data, shred-log destruction confirmation, and temporary platform shutdown during forensics.
Instructure said Canvas breach negotiations with ShinyHunters included data return and shred-log confirmation of deletion after finals-week shutdown and student access disruption.
Instructure said Canvas was taken offline after ShinyHunters claimed a breach affecting nearly 9,000 schools and threatened data leaks unless ransom was paid.
In Hamilton County Schools, Instructure reported a Canvas breach agreement with hackers to delete stolen data after student access disruptions during the school year.