Canvas Learning Platform Hacked: ShinyHunters Breach Exposes Data of 275 Million Students and Teachers May 8, 2026 | Cybersecurity | Education Technology | Breaking News

byUSA -
0

 


Meta Description: Hacker group ShinyHunters breached Canvas, the popular online learning platform used by 30 million users. Learn what data was exposed, which schools are affected, and what students should do now.

Canvas Cyberattack Disrupts Schools Nationwide During Finals Week

An apparent cyberattack shut down Canvas — a popular, cloud-based digital hub for classrooms with more than 30 million active users globally — depriving students and teachers of essential classroom materials at a time when many are taking or preparing for final exams. CNN

Instructure, the company that runs Canvas, disclosed the breach to affected institutions this week, confirming that names, email addresses, student ID numbers, and private messages between users had been accessed before the breach was contained. WCNC

Who Is Behind the Canvas Hack?

The hacking group named ShinyHunters claimed responsibility for the breach at Instructure, according to Luke Connolly, a threat analyst at the cybersecurity firm Emsisoft. CBS News

Connolly described ShinyHunters as a loose affiliation of teenagers and young adults based in the U.S. and the United Kingdom, a group believed to have been formed in 2020 and involved in several previous high-profile hacking incidents. Past targets include Ticketmaster, AT&T, and Rockstar Games. Time

How Many Schools and Users Are Affected?

The hackers claim nearly 9,000 schools worldwide were affected, with the data breach including private messages and other personally identifiable information of 275 million individuals. KQED

Major universities including Columbia, Princeton, Harvard, and Georgetown reported that a ransom note signed by ShinyHunters appeared on the homepage of their Canvas sites. School districts in California, Florida, Georgia, Oklahoma, Oregon, Nevada, North Carolina, Tennessee, Utah, Virginia, and Wisconsin also reported being affected. CNN

What Data Was Stolen?

The company stated that the affected data may have included full names, email addresses, student ID numbers, and messages, but said there is no evidence that passwords, dates of birth, government identifiers, or financial information were exposed. WCNC

The sensitivity of Canvas messages compounds the concern, as the platform is frequently used by students to disclose medical and mental health information to academic advisers, request accommodations, and communicate with Title IX advocates. WCNC

Ransom Deadline Set for May 12, 2026

ShinyHunters warned Instructure with a deadline of May 12, 2026, stating: "You have till the end of the day by 12 May 2026 before everything is leaked." The hackers added that any affected schools wishing to prevent the release of data should reach out to negotiate a settlement. Time

ShinyHunters also warned that failure to pay could result in the release of "several billions of private messages among students and teachers." WCNC

How Did the Hackers Get In?

Instructure said the hackers exploited an issue linked to its Free-For-Teacher accounts, and as a result, the company made the difficult decision to temporarily shut down those accounts. CBS News

This is Instructure's second confirmed breach in approximately eight months — in September 2025, the same ShinyHunters group exploited a social engineering attack against the company's Salesforce environment. WCNC

Is Canvas Back Online?

Canvas was back online Friday and available for most users, according to the company behind the system. However, Canvas Beta and Canvas Test platforms remained in maintenance mode. CBS News

What Should Students and Staff Do Right Now?

Cybersecurity experts urge Canvas users to be on the lookout for phishing attacks. "Once they get this basic information — name, student ID, email — you become an increased risk you'll be targeted," said Rob D'Ovidio, an associate professor at Drexel University's Department of Criminology. 6abc Philadelphia

Recommended actions for Canvas users:

A Growing Threat to Education Technology

Rich in digitized data, the nation's schools are prime targets for criminal hackers who are locating and scooping up sensitive files. Past attacks have hit Minneapolis Public Schools and the Los Angeles Unified School District. Connolly noted the Canvas attack is strikingly similar to a breach at PowerSchool, which also offers learning management tools. CBS News

Tags: Canvas hacked, Instructure data breach, ShinyHunters, online learning platform cyberattack, student data breach 2026, Canvas LMS hack, education cybersecurity, school data breach

Sources: CNN, CBS News, KQED, NBC News, Time, WCNC

Post a Comment

Previous Post Next Post