Instructure Canvas Cyberattack and Data Breach

Instructure, the company behind the widely used Canvas learning management system, experienced a major cyberattack perpetrated by the hacking group ShinyHunters. The attack caused widespread disruption, knocking Canvas offline during final exam periods for millions of students and educators across thousands of schools and universities worldwide. ShinyHunters claimed to have stolen 6.65TB of data, including student names, email addresses, ID numbers, and private messages, and threatened to leak it unless a ransom was paid. Instructure initially detected unauthorized activity on April 29 and again on May 7, leading to temporary shutdowns of the platform. The company later announced it reached an agreement with ShinyHunters for the return of the stolen data and received digital confirmation of its destruction, though experts remain skeptical about the complete eradication of the data. The incident has drawn congressional scrutiny, with the United States — United States House Committee on Homeland Security requesting a briefing from Instructure's CEO. The breach exposed vulnerabilities in education technology and highlighted the significant impact of cyberattacks on critical infrastructure, leading to academic disruptions, extended deadlines, and increased stress for students and faculty.