ShinyHunters Breaches Instructure Canvas LMS Through Free-For

Cybersecuritynews •Tushar Subhra Dutta • May 11, 2026

The infamous hacking group ShinyHunters has struck again, this time targeting Instructure, the company behind Canvas Learning Management System (LMS). In early May 2026, Instructure confirmed unauthorized activity on its Canvas platform after detecting suspicious access on April 29, 2026. The breach exposed user names, email addresses, student ID numbers, and some private messages exchanged […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Major Data Breach at Canvas Affects 275 Million Users Instructure, the company behind the Canvas learning management system, confirmed a significant data breach involving the ShinyHunters hacking group. The attackers claim to have stolen over 3.65TB of data, potentially impacting up to 275 million users, including students, teachers, and staff from nearly 9,000 institutions worldwide. The exposed information includes names, email addresses, student ID numbers, and private messages, although there is no evidence that passwords or financial data were compromised. Instructure is currently working with cybersecurity experts and law enforcement to investigate the breach and has implemented security measures, including patching vulnerabilities and increasing monitoring. The attackers have threatened to leak the data unless their demands are met, with a deadline set for May 6, 2026. The incident highlights the growing trend of cyberattacks targeting educational technology firms, which hold vast amounts of personal information. 590 sources 71

Extracted Entities

ShinyHunters Breaches Instructure Canvas LMS Through Free-For

The full story

Extracted Entities

Attack Types (1)

Companies (2)

CWE Weaknesses (1)