SECURITY: INSTRUCTURE's CANVAS: School Platform Cyberattack

Image from ArsTechnica¹

Thursday 7 May 2026, the hacker group ShinyHunters used a ransomware cyberattack on INSTRUCTURE's CANVAS amidst finals to close out the year. Instructure temporarily brought the system offline after identifying malicious activity on their network. The cyberattack compromised user names, emails, student ID numbers, and messages. Instructure said no indication of passwords, date of birth, government identifiers, or financial information were compromised. As of Friday, 8 May 2026, Instructure returned the system back online.¹

On its dark website, ShinyHunters claimed responsibility for affecting 275 million people with 8,800 schools. Students were met with ransom message on their login screen.¹

VERSIONS: 2026v.0.1.0

REFERENCES

1. ArsTechnica's Chaos erupts cyberattack disrupts learning platform Canvas amid finals ↩ ↩² ↩³