A massive ShinyHunters attack has compromised Canvas login portals for 15,000 institutions, including top universities like Harvard and Oxford, exfiltrating 3.65 terabytes of student and faculty data. This incident, alongside a concurrent supply chain attack on Vimeo, exposes critical flaws in EdTech security and third-party vendor trust, raising urgent questions about data protection.
#cybersecurity #canvas #instructure
🤖 This post was AI-generated.
New, from me: Canvas Breach Disrupts Schools and Colleges Nationwide
"An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework at school districts and universities across the United States today, after a cybercrime group defaced the service’s login page with a ransom demand that threatened to leak data from 275 million students and faculty across nearly 9,000 educational institutions."
"Canvas parent firm Instructure [NYSE:INST] responded to today's defacement attacks by disabling the platform, which is used by thousands of schools, universities and businesses to manage coursework and assignments, and to communicate with students."
Lots more here:
https://krebsonsecurity.com/2026/05/canvas-breach-disrupts-schools-colleges-nationwide/
ShinyHunters claims data theft from 8,800 schools (Instructure/Canvas)
#HackerNews #ShinyHunters #DataTheft #Schools #Instructure #Canvas #Cybersecurity #EducationSecurity
I've seen questions about the #instructure #canvas leak, to the effect of "why's the data so dangerous if there's nothing financial in it?"
There are identifiers, for one thing.
But I think the real threat is... look, students send instructors some really heavy and confidential stuff in Canvas messaging sometimes. Health stuff. Family stuff. Relationship stuff. Occasionally even crime stuff.
I really am relieved that I direct students to email. I feel horrible for what could happen.
Instructure, the company behind Canvas, has been hacked.
📢 Just In: #ShinyHunters hackers defaced the official Canvas LMS portal after breaching Instructure systems, disrupting university access worldwide.
Students at multiple universities reported outages and class disruptions as Canvas portals displayed ransom-style messages linked to the group.
Read more: https://hackread.com/shinyhunters-defaces-canvas-lms-portal-universities-affected/
I'm not sure I understand why people are trying to research what schools use Canvas. ShinyHunters provided a list of all of the schools that were caught up in this attack:
https://databreaches.net/wp-content/uploads/Claimed-Victims-of-Canvas-Cyber-Incident.txt That list has 8,809 entities listed.
It's not the entire universe of schools that use Canvas, but it's probably an accurate list of the schools that may be affected. A sample list ShinyHunters provided for my earlier report on this incident showed filesizes for: communication_channels.csv.gz, conversation_messages.csv.gz, conversations.csv.gz, and users.csv.gz. There were about 7,780 schools in that sample.
And yeah, hang on to your Tox because Session is closing in July, it seems.
#Instructure #Canvas #ShinyHunters #hackandleak #EduSec #databreach
treelzebub
Daniel Marsh
BrianKrebs
Mathrubhumi English
Hacker News
Dorothea Salo
germanio
Hackread.com
DysruptionHub
Dissent Doe 