US House Committee Demands Answers from Instructure Over Canvas Data Breach
The US House Committee on Homeland Security has requested Instructure, the company behind the online learning platform Canvas, to provide detailed information regarding recent cyberattacks. These attacks, which began on April 29, disrupted services by exploiting API keys and led to the defacement of school login portals. The cybercriminal group ShinyHunters claimed responsibility, allegedly stealing 3.65 terabytes of data, affecting 275 million individuals across 9,000 educational institutions. Instructure has since negotiated the return and deletion of the stolen data and has temporarily shut down its Free-For-Teacher accounts, which were exploited during the attacks. The Committee is seeking a briefing to understand the circumstances of the breaches, the data affected, and the company's response measures.