Last Update: 09/22/2026 at 11:34 PM EST

Canvas Breach Disrupts California Colleges

Coverage from The Hornet, Daily Breeze, and others

Canvas Breach Disrupts California Colleges topic image

A cybersecurity incident at Instructure disrupted Canvas access across colleges and universities, including all 23 California State University campuses, during a critical academic period.

Instructure said potentially exposed information included names, email addresses, student and faculty ID numbers, rosters, and user messages, while reporting no evidence that passwords, financial data, birth dates, or government identifiers were involved at the time. The incident also generated extortion claims attributed to ShinyHunters, prompting institutions to restrict access, warn users about phishing, and develop contingency plans for online instruction.

Looking Back
77 Day Timeline
May 7May 21Jun 4Jun 18Jul 2Jul 16
History
07/22/2026

The update adds a clearer timeline and sharper characterization of the incident: Instructure now pins it to May 1, confirms the affected data categories more precisely, and frames the situation as an ongoing extortion case tied to ShinyHunters. It also shows the operational response broadening from immediate access recovery to longer-term contingency planning for future Canvas outages.

All Articles12 articles
Additional12 articles · CI Score below 45
The Hornet
7/22/2026 • Data Breaches & Exposure Events • General
The Hornet
5/8/2026 • Data Breaches & Exposure Events • General
Daily Breeze / Kristy Hutchings
5/7/2026 • Data Breaches & Exposure Events • General
Los Angeles Times
5/8/2026 • Data Breaches & Exposure Events • General
Whittier Daily News / Kristy Hutchings
5/7/2026 • Data Breaches & Exposure Events • General
El Camino College The Union / Michelle Claire Pentreath
6/6/2026 • Data Breaches & Exposure Events • General
California Faculty Association / Kristin Lam
5/14/2026 • Data Breaches & Exposure Events • General
KCRA / Andres Valle
5/9/2026 • Data Breaches & Exposure Events • General
San Antonio Current
5/8/2026 • Data Breaches & Exposure Events • General
The Business Journal / Gabriel Dillard
5/8/2026 • Data Breaches & Exposure Events • General
Orange County Register / Kristy Hutchings
5/7/2026 • Data Breaches & Exposure Events • General
Daily News / Kristy Hutchings
5/7/2026 • Data Breaches & Exposure Events • General