Instructure Confirms Data Breach Affecting Millions of Users
Instructure, a U.S.-based educational technology company known for its Canvas learning management system, has confirmed a data breach involving the ShinyHunters extortion gang. The breach exposed personal information of users from nearly 9,000 schools worldwide, affecting approximately 275 million individuals, including students, teachers, and staff. The compromised data includes names, email addresses, and student ID numbers, but not passwords or financial information. Instructure is collaborating with cybersecurity experts and law enforcement to investigate the incident and has implemented security measures such as patching vulnerabilities and rotating application keys.