Instructure Faces Cyber Attack, User Data Potentially Exposed
Instructure, a prominent ed-tech software company known for its Canvas learning management system, is investigating a cybersecurity breach that may have exposed user data. The breach, disclosed on May 1, involved a criminal threat actor and potentially compromised names, email addresses, student identification numbers, and user-to-user messages. However, there is no evidence that passwords or financial information were affected. The cyber extortion group ShinyHunters has claimed responsibility, threatening to leak the data unless a ransom is paid. Instructure has taken steps to secure its platforms, including revoking credentials and deploying security patches.