Massive Data Breach in Canvas Cyberattack Exposes 280 Million Users
Instructure, the company behind the Canvas learning management system, has experienced a significant data breach, with the ransomware group ShinyHunters claiming responsibility. The breach reportedly affects 280 million users, including teachers, school staff, and students, potentially exposing names, email addresses, and private messages. The cyberattack impacted Canvas instances across 8,809 educational institutions. ShinyHunters has threatened to leak the data if Instructure does not respond by May 12. In response, Instructure has taken several security measures, including revoking credentials, deploying platform-wide protections, and engaging a third-party forensic firm.