The Instructure-owned studying administration platform, Canvas, is down after just lately confirming a large knowledge breach that impacted scholar names, e mail addresses, ID numbers, and messages. College students trying to entry the system on Thursday noticed a message from the hacking group ShinyHunters, which claimed accountability for the assault:
ShinyHunters has breached Instructure (once more). As an alternative of contacting us to resolve it they ignored us and did some “safety patches.” If any of the colleges within the affected record are fascinated about stopping the discharge of their knowledge, please seek the advice of with a cyber advisory agency and get in touch with us privately at TOX to barter a settlement. You’ve got until the top of the day by 12 Might 2026 in the beginning is leaked.
The message included a hyperlink to an inventory of colleges ShinyHunter claims to have breached by way of Canvas.
“Instructure has positioned Canvas, Canvas Beta and Canvas Check in upkeep mode,” based on Infrastructure’s standing web page. “We anticipate being up quickly, and can present updates as quickly as potential.”
Instructure stated final week that it “deployed patches to boost system safety” following the breach. ShinyHunters — which has claimed accountability for assaults on Ticketmaster, AT&T, Rockstar Video games, ADT, and Vercel — stated its knowledge leak website comprises 9,000 colleges, together with knowledge belonging to 275 million college students, lecturers, and different employees, based on Bleeping Pc.
Replace, Might seventh: Added Instructure’s upkeep mode message.


