Mastodawn

Here's a detailed @aembit_io analysis of the #ShinyHunters attack against @Canvas_by_Inst. The #CanvasLMS was brought to its knees via #ransomware. The #Canvas incident reflects a broader transition occurring across enterprise infrastructure. #infosec
https://go.aembit.io/s/the-canvas-breach-shows-what-happens-when-saas-platforms-become-identity-infrastructure-27475

The Canvas Breach Shows What Happens When SaaS Platforms Become Identity Infrastructure

ShinyHunters breached Instructure's Canvas LMS through a support ticket vulnerability, exfiltrating 275M records from nearly 9,000 schools. Here's what the incident reveals about SaaS platforms as identity infrastructure, credential rotation under fire, and the access risks that scale with agentic AI.

Aembit

BGDon 🇨🇦 🇺🇸 👨‍💻May 12

"Agreement:" reached in ShinyHunter's breach of Infrastructure's Canvas LMS .... the cybercrime gang returned the stolen data (which includes usernames, email addresses, course names, enrollment information, and messages) and provided shred logs confirming its destruction.

While not confirmed, it looks like a ransom payment was made. A webinar on May 13 may provide more details. https://www.instructure.com/incident_update #Breach #Hackers #ShinyHunters #Infrastructure #CanvasLMS #LMS #StudentData #DataPrivacy #Ransom #RansomWare #CyberCrime

Doug Holton May 12

RE: https://mastodon.social/@dougholton/116539992334464719

In addition to expecting more phishing/hacking attacks in the future, #CanvasLMS schools should expect the cost of the LMS to jump sharply, now that Instructure paid the ransom and is being sued by dozens of schools: https://www.pcmag.com/news/canvas-developer-apologizes-for-breach-as-class-action-lawsuits-pile-up & are owned by private equity (KKR)

Doug Holton May 12

In addition to expecting more phishing/hacking attacks in the future, #CanvasLMS schools should expect the cost of the LMS to jump sharply, now that Instructure paid the ransom and are being sued by dozens of schools: www.pcmag.com/news/canvas-... & are owned by private equity (KKR)

RE: https://bsky.app/profile/did:plc:agqcfbroaqcwgesbh2s26v44/post/3mle7al7qok2n

Canvas Developer Apologizes fo...

Doug Holton May 8

I'd recommend faculty backup their #CanvasLMS gradebook community.instructure.com/en/kb/articl... & export student submissions for assignments not yet graded community.instructure.com/en/kb/articl... Be prepared for an increased amount of phishing emails in the future: en.wikipedia.org/wiki/Phishing

How do I export grades in the ...

How do I export grades in the Gradebook? - Instructure Community

You can export scores from the Gradebook and download them to your computer as a CSV file. The Gradebook CSV assignment columns display in the same order as shown in the Gradebook for an individual user. Notes: * Some columns that appear in the CSV file are read-only columns calculated by rules or percentages set in…

Instructure Community

Doug Holton May 8

RE: https://mastodon.social/@jasonkoebler/116539935073004192

I'd recommend faculty export their gradebook as a precaution https://community.instructure.com/en/kb/articles/660866-how-do-i-export-grades-in-the-gradebook and download any student submissions for assignments not yet graded https://community.instructure.com/en/kb/articles/660693-how-do-i-download-all-student-submissions-for-an-assignment And everyone be prepared for an increased amount of phishing emails in the future since everyone's email addresses and names and messages were part of the leaked data https://en.wikipedia.org/wiki/Phishing
#CanvasLMS #Phishing

DoomsdaysCW May 8

#Cyberattack hits #Canvas system used by thousands of schools as #finals loom

By HEATHER HOLLINGSWORTH
Updated 11:19 PM EDT, May 7, 2026

Excerpt: "Connolly said the Canvas attack is strikingly similar to a breach at #PowerSchool, which also offers learning management tools [#LMS]. In that case a Massachusetts college student was charged.

"Connolly described #ShinyHunters as a loose affiliation of teenagers and young adults based in the U.S. and the United Kingdom. The group also has been tied to a other attacks, including one aimed at #LiveNation’s #Ticketmaster subsidiary."

#CanvasLMS #Instructure #CanvasPlatform #Cyberattack #CanvasSoftware #Education #Technology #Databreach

Cyberattack on Canvas system causes chaos for students at thousands of schools

A cyberattack has caused chaos for students at thousands of schools as they study for finals. The attack Thursday targeted a system that schools and universities use to manage grades, assignments and lecture videos. The hacking group named ShinyHunters claimed responsibility for the breach at Instructure, the company behind the learning management system Canvas. An expert says the hacking group posted online that nearly 9,000 schools worldwide were affected, with billions of private messages and other records accessed.

AP News

Ted Curran M. Ed.May 8

https://ww2.kqed.org/news/2026/05/07/canvas-hacked-bay-area-colleges-disrupted-by-global-cyberattack-on-learning-platform/
9000 #CanvasLMS #universities #hacked! #edtech

Canvas Hacked: Bay Area Colleges Disrupted By Global Cyberattack on Learning Platform

A hacker group called ShinyHunters is claiming responsibility for the attack that brought down Canvas and is demanding a ransom to prevent the release of data.

KQED

NewsletterTF May 8

Canvas LMS Faces Worldwide Disruption Amid Ransomware Attack

Canvas LMS is down globally due to a ransomware attack by ShinyHunters. Students face exam disruptions and data leak threats by May 12.

#CanvasLMS, #RansomwareAttack, #Cybersecurity, #StudentData, #EdTech

https://newsletter.tf/canvas-lms-down-ransomware-attack-students-affected/

NewsletterTF May 8

Thousands of schools worldwide are affected as Canvas LMS goes offline due to a ransomware attack. Students cannot access course materials for final exams.

#CanvasLMS, #RansomwareAttack, #Cybersecurity, #StudentData, #EdTech
https://newsletter.tf/canvas-lms-down-ransomware-attack-students-affected/

Canvas LMS Down Worldwide After Ransomware Attack

Canvas LMS is down globally due to a ransomware attack by ShinyHunters. Students face exam disruptions and data leak threats by May 12.

NewsletterTF