AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
Canvas Data Breach
Coverage from Los Angeles Times, The Hornet, and others
A cyberattack on Instructure’s Canvas learning platform disrupted access for students and faculty during finals.
ShinyHunters claimed responsibility and threatened to publish stolen information; Instructure said it reached an agreement, recovered data, and received digital confirmation that remaining copies were destroyed, while acknowledging it could not verify permanent deletion. Reported exposed information included names, email addresses, student ID numbers, and Canvas messages. The incident also prompted scrutiny of platform security and the limits of relying on assurances from attackers to prevent later misuse.
Looking Back
80 Day Timeline
May 4
May 18
May 30
Jun 13
Jun 25
Jul 9
Jul 21
History
10/03/2026
The update adds a longer response timeline, with reporting placing the breach’s start on May 1 and response and service restoration extending into July. Schools also advised users to watch for suspicious messages and use official login routes; the core breach and deletion uncertainty remain unchanged.
All Articles168 articles
Important
Instructure closed Canvas logins after a ShinyHunters breach claim, leaving UC and other U.S. campuses unable to access courses during finals preparations.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure restored Canvas for Fullerton College in California after ShinyHunters claimed a May 1 breach and NOCCCD assessed potential exposure of student contact data.
7/22/2026 • Data Breaches & Exposure Events • General
In May, Instructure Canvas suffered a data breach affecting about 275 million users across roughly 9,000 education institutions, prompting universities to revise third-party vendor monitoring and breach response.
6/25/2026 • Data Breaches & Exposure Events • General
Instructure reported a 2026 Canvas security incident exposing usernames, emails, course and enrollment data, prompting FERPA and phishing response guidance for K-12 and higher education users worldwide.
5/15/2026 • Data Breaches & Exposure Events • General
Instructure disclosed a ShinyHunters ransomware incident affecting Canvas after April 29 discovery, with May 7 ransom demands and May 12 agreement amid exposure of student identifiers and messages.
5/13/2026 • Data Breaches & Exposure Events • General
Instructure took Canvas offline after a ShinyHunters ransom-linked breach threatened student data exposure and triggered a Utah federal lawsuit.
5/13/2026 • Data Breaches & Exposure Events • General
Instructure, during 2020s, described a Canvas breach agreement with ShinyHunters to delete stolen data after ransom threats and temporary shutdown.
5/13/2026 • Data Breaches & Exposure Events • General
Instructure said it recovered and secured confirmation of destruction of Canvas data after a ShinyHunters cyberattack, while a federal lawsuit in Utah alleges inadequate protection.
5/13/2026 • Data Breaches & Exposure Events • General
Instructure disclosed Canvas infiltrations in April and May and an agreement involving returned stolen data after a ShinyHunters cyberattack, triggering federal class actions.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said Canvas was taken offline during finals after a ShinyHunters breach, with returned data and claimed deletion following an agreement.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said a Canvas cyberattack agreement included data return and shred-log destruction confirmation after ShinyHunters threatened to leak student data.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported an agreement with a ShinyHunters-linked actor after a Canvas cyberattack disrupted access during finals and exposed student identity and message data.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reached an agreement with ShinyHunters after a April 29 Canvas breach exposed student and school-system data and disrupted final exams, according to company and FBI statements.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported a Canvas ransomware incident during finals, citing an agreement to return and destroy stolen data after ShinyHunters threatened large-scale student record leaks.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported a settlement with an unauthorized actor after a Canvas data breach attributed to ShinyHunters, warning that exposed usernames and emails can enable phishing.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said it reached an agreement with Canvas hackers after a ShinyHunters breach threatened data leaks affecting about 9,000 schools during final exams.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported a ShinyHunters ransomware extortion incident with two Canvas hacks, an undisclosed ransom deal, and claimed data return covering about 275 million users before May 12.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure, during finals week, restored Canvas access after a ShinyHunters ransomware breach threat covering nearly 9,000 schools and 275 million individuals.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said it reached an agreement with ShinyHunters after the Canvas cyberattack, returned pilfered data, and received shred-log confirmation while keeping complete deletion certainty unavailable.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said stolen Canvas data was returned after ShinyHunters claimed a ransomware-style cyberattack involving student identifiers and messaging.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported an agreement to delete Canvas stolen data after ShinyHunters ransomware threats covered nearly 9,000 schools and 275 million individuals.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure announced an agreement with the unauthorized actor behind the Canvas learning platform breach, affecting up to 275 million students worldwide, after activity began April 29 and continued into early May.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported a Canvas learning platform breach potentially affecting up to 275 million students worldwide, with an agreement involving ShinyHunters and unverified data deletion.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure announced an agreement with a hacking group tied to a Canvas breach potentially exposing up to 275 million students worldwide in 2024.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure disclosed a ShinyHunters-linked ransomware breach of Canvas starting in early May, with potential education data exposure affecting institutions including Vermont.
5/11/2026 • Data Breaches & Exposure Events • General
Instructure disclosed a Canvas cybersecurity incident in May 2020s that exposed student identifiers and messages and led to a US-wide maintenance outage during finals.
5/10/2026 • Data Breaches & Exposure Events • General
Instructure faced a ransomware-driven Canvas breach in 2026 after Free-for-Teacher account exploitation, exposing student and staff data and disrupting access in U.S. K-12 districts.
5/9/2026 • Data Breaches & Exposure Events • General
ShinyHunters claimed responsibility for a May Instructure Canvas breach while Canvas was unavailable for US universities and K-12 schools.
5/9/2026 • Data Breaches & Exposure Events • General
Instructure said Canvas went offline after an April 29 data breach, exposing student identifiers and messages and prompting exam disruptions across U.S. schools.
5/9/2026 • Data Breaches & Exposure Events • General
Instructure said Canvas shut down after a breach detected on April 29, disrupting U.S. education access and exposing identity and message data.
5/9/2026 • Data Breaches & Exposure Events • General
After an Instructure-linked Canvas breach, Princeton, Rutgers, and other US universities reported access loss, phishing risks, and student identifier exposure.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure notified institutions after Canvas was disabled on May 7, with ShinyHunters claiming a breach and universities rescheduling exams during the outage.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure reported a May 7 Canvas outage after repeated unauthorized access, citing Free-For-Teacher account weaknesses and exposing student data in an April 29 incident.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure disclosed a Canvas cyberattack detected on April 29 that disrupted finals and exposed student personally identifiable information, prompting recovery and regulatory scrutiny in the U.S. and beyond.
5/8/2026 • Data Breaches & Exposure Events • General
ShinyHunters targeted Instructure's Canvas with an extortion attempt starting May 1, leading Instructure to report exposed student identifiers and widespread U.S. school disruption.
5/8/2026 • Data Breaches & Exposure Events • General
In Salt Lake City, Instructure investigated a May 7 ShinyHunters ransomware claim after alleged Canvas student-record exposure and temporary platform downtime for containment.
5/8/2026 • Data Breaches & Exposure Events • General
Fullerton College restored Canvas access after Instructure breach alerts on May 1 and May 7 guidance to prevent logins outside MyGateway MFA, amid ShinyHunters ransom threats.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure reported a May 1 cybersecurity incident tied to claimed ShinyHunters access affecting Canvas for thousands of schools, including exposure of student names, emails, IDs, and messages.
5/8/2026 • Data Breaches & Exposure Events • General
ShinyHunters disrupted Canvas access in San Diego and reportedly exposed student identifiers and private messages after suspicious Canvas API activity and ransom-related claims.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure's Canvas system outage in the United States involved a ShinyHunters data breach threat, leading universities to postpone exams or disable logins and warn about phishing risk.
5/7/2026 • Data Breaches & Exposure Events • General
In Pennsylvania, Canvas cyberattack guidance emphasizes BPINA determination, individual notice, and federal Title IV notification timelines for schools and colleges.
6/8/2026 • Data Breaches & Exposure Events • General
Instructure said the company paid ShinyHunters after Canvas intrusions exposed education PII and led to platform shutdown while House Homeland Security and the FBI initiated oversight and warnings.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported a May 2026 ShinyHunters cyberattack on Canvas that exploited Free-For-Teacher account weaknesses, exposing U.S. educational PII.
5/11/2026 • Data Breaches & Exposure Events • General
Instructure restored most Canvas access after a ShinyHunters-linked data breach, while U.S. schools delayed finals and warned about phishing and credential risks during May 2026 recovery.
5/9/2026 • Data Breaches & Exposure Events • General
Instructure reported a Canvas data breach and related outage on Thursday after detecting unauthorized activity on April 29, disrupting final exams across many U.S. schools.
5/8/2026 • Data Breaches & Exposure Events • General
North Carolina schools faced a Canvas ransomware demand in early May 2020s, leading Instructure to take Canvas offline and Wake County to warn families after a ShinyHunters breach claim.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure reported an agreement to delete Canvas breach data after ShinyHunters claimed access to data from thousands of schools and hundreds of millions of individuals.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said it reached an agreement following a Canvas ransomware breach during finals, after ShinyHunters threatened large-scale data leaks.
5/13/2026 • Data Breaches & Exposure Events • General
Instructure reported a Canvas breach agreement with ShinyHunters after a ransomware attack disrupted students in finals week in the United States.
5/13/2026 • Data Breaches & Exposure Events • General
Instructure reported agreement terms and deletion confirmation after ShinyHunters threatened a Canvas breach affecting thousands of schools during finals.
5/13/2026 • Data Breaches & Exposure Events • General
Instructure reported a Canvas hacker agreement after finals-week disruption, including returned data and deletion confirmation via shred logs.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure agreed with an unauthorized actor after a Canvas platform breach that potentially exposed student personal data for up to 275 million learners worldwide.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said Canvas restored access after a ShinyHunters breach and reported agreement-based data deletion following a temporary platform shutdown.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said a ShinyHunters cyberattack on Canvas led to temporary takedown, data return, and shred-log confirmation of destruction amid an ongoing Utah lawsuit.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said Canvas reached an agreement with ShinyHunters after a cyberattack, including returned data and shred-log confirmation, while keeping the platform offline.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported after a Canvas breach that data was returned and destroyed indicators were provided, following ransomware-related threats from ShinyHunters.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said ShinyHunters demanded ransom for a Canvas breach affecting thousands of schools and 275 million individuals, and Instructure negotiated data return and deletion verification.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said an agreement after a Canvas cyberattack returned data and claimed destruction, following ShinyHunters ransom threats affecting schools worldwide.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported a ransomware agreement after a Canvas breach disrupted student access during finals, amid ShinyHunters leak threats and Utah lawsuit scrutiny.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure took Canvas offline in a cyberattack investigation after ShinyHunters threatened to leak student data tied to thousands of schools.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported a post-breach agreement to delete stolen Canvas data after a ShinyHunters ransomware incident disrupted schools during finals.
5/12/2026 • Data Breaches & Exposure Events • General
Pittsfield Public Schools reported potentially accessed Canvas student data after Instructure confirmed a criminal cybersecurity incident on May 1.
5/10/2026 • Data Breaches & Exposure Events • General
Instructure said unauthorized activity in Canvas detected April 29 and additional activity on May 7 affected Prince William County Public Schools in Virginia, with exposure of some user personal information.
5/9/2026 • Data Breaches & Exposure Events • General
Instructure restored CarmenCanvas access for Ohio State students on May 8 after a April 29 and May 7 breach exposed student names, emails, and ID numbers.
5/8/2026 • Data Breaches & Exposure Events • General
Canvas was hit by a ransomware-linked cyberattack detected May 1, disrupting classes and final exams for schools in Wisconsin while Instructure investigated potential student PII exposure.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure restored Canvas after a ShinyHunters ransomware claim threatened student and teacher data exposure across U.S. schools.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure confirmed a Canvas cyberattack discovered May 1 in Florida, exposing student identifiers and messages and prompting temporary access disablement across multiple schools and universities.
5/8/2026 • Data Breaches & Exposure Events • General
Wake County Public Schools and North Carolina education agencies notified communities after Instructure reported a Canvas data breach affecting districts.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure reported a May 7 Canvas outage tied to a claimed ShinyHunters incident, with limited data exposure and steps for affected schools across the United States and abroad.
5/8/2026 • Data Breaches & Exposure Events • General
UNC Chapel Hill students were locked out of Canvas during final exams while Instructure investigated a reported breach affecting names, emails, identifications, and messages, with detection reported from April 29.
5/8/2026 • Data Breaches & Exposure Events • General
Wake County Public School System investigated an April 25 Canvas cybersecurity incident after Instructure notified the district and North Carolina education officials.
5/6/2026 • Data Breaches & Exposure Events • General
Interesting
Instructure disclosed an early-May Canvas breach affecting a California community college district, exposing student emails, ID numbers, and Canvas inbox messages while investigators assessed phishing risks.
5/6/2026 • Data Breaches & Exposure Events • General
El Camino College reviewed a May 1 Canvas hack on June 2, after leaked names, emails, IDs, rosters, and inbox messages and Instructure response efforts.
6/6/2026 • Data Breaches & Exposure Events • General
In May 2026, Instructure's Canvas learning platform was hit by ransomware, leading to student data theft and subsequent fraud-phishing warnings.
5/26/2026 • Data Breaches & Exposure Events • General
Roanoke City Public Schools paused Canvas after an Instructure breach in April and May, then restored access on May 13 after security reviews.
5/19/2026 • Data Breaches & Exposure Events • General
Instructure shut down and restored Canvas starting May 7 after a ShinyHunters breach exposed student and course data, while California colleges temporarily disabled access.
5/15/2026 • Data Breaches & Exposure Events • General
Clayton Muhammad reported a ransomware-driven outage of Canvas at Waubonsee Community College, where breached usernames, emails, and messages disrupted coursework.
5/13/2026 • Data Breaches & Exposure Events • General
Instructure reported a resolution of a Canvas cyberattack during finals after a ShinyHunters ransom threat, citing returned data, shred-log destruction evidence, and ongoing forensic review.
5/13/2026 • Data Breaches & Exposure Events • General
Instructure reported a Canvas cyberattack in which ShinyHunters claimed data exposure, while the company took the platform offline and verified alleged data destruction.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said a Canvas cyberattack attributed to ShinyHunters led to a temporary shutdown and digital confirmation that stolen data copies were destroyed.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure, responding to a ShinyHunters cyberattack on Canvas, reported returned stolen data, shred-log destruction confirmation, and temporary platform shutdown during forensics.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said Canvas breach negotiations with ShinyHunters included data return and shred-log confirmation of deletion after finals-week shutdown and student access disruption.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said an agreement was reached after ShinyHunters disrupted Canvas during finals and threatened to leak data on thousands of schools and hundreds of millions of individuals.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported a Canvas breach agreement in response to ShinyHunters ransomware threats as schools faced finals week disruptions.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported a ransomware-related breach of Canvas during finals week and said data deletion was negotiated with ShinyHunters, affecting nearly 9,000 schools.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said Canvas was taken offline after ShinyHunters claimed a breach affecting nearly 9,000 schools and threatened data leaks unless ransom was paid.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure ended the Canvas shutdown in May after a settlement with an unauthorized actor, following unauthorized access that threatened student data and disrupted finals at Idaho schools.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported alleged shred-log confirmed deletion after a Canvas cyberattack claimed by ShinyHunters disrupted schools during finals week.
5/12/2026 • Data Breaches & Exposure Events • General
A Canvas data breach in the USA affected 275 million people and nearly 9,000 schools, after attackers claimed data erasure that experts said could not be verified.
5/12/2026 • Data Breaches & Exposure Events • General
ShinyHunters posted a ransom note on Instructure Canvas homepages in May, affecting K-12 and universities, and Instructure reported a settlement with data return and destruction logs.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure said a Canvas breach during finals involved student IDs and emails, after an agreement with ShinyHunters included data return and claimed deletion.
5/12/2026 • Cybersecurity (Privacy-Relevant) • General
In Hamilton County Schools, Instructure reported a Canvas breach agreement with hackers to delete stolen data after student access disruptions during the school year.
5/12/2026 • Data Breaches & Exposure Events • General
Instructure reported a Canvas cyberattack during finals in Utah, citing returned stolen data and shred-log destruction verification amid ransom demands.
5/12/2026 • Data Breaches & Exposure Events • General
North Carolina Department of Public Instruction temporarily disabled Canvas access via NCEdCloud after Instructure informed NCDPI of a breach and threat actor messages on May 5-6.
5/11/2026 • Data Breaches & Exposure Events • General
Pittsfield Public Schools notified families on Sunday about a Canvas incident potentially exposing student names, emails, ID numbers, and messages.
5/11/2026 • Data Breaches & Exposure Events • General
In Salt Lake City, Instructure CEO Steve Daly disclosed that a Canvas cyberattack exposed usernames, email addresses, and enrollment information after unauthorized access.
5/11/2026 • Data Breaches & Exposure Events • General
Instructure disabled Canvas after April 29 unauthorized activity and ShinyHunters claims, reporting student ID and message exposure while notifying FBI and CISA.
5/11/2026 • Data Breaches & Exposure Events • General
In North Carolina, Hertford and Gates County schools responded to an Instructure Canvas breach claim by a ransom group after Instructure reported unauthorized access starting April 25.
5/10/2026 • Data Breaches & Exposure Events • General
Cassia County School District reported Instructure Canvas security incidents during the prior week, after Instructure notified the FBI and CISA and remediated compromised credentials.
5/9/2026 • Data Breaches & Exposure Events • General
Instructure disclosed a Canvas cyberattack affecting Michigan schools, reporting April 29 breach onset and student data exposure including emails and IDs.
5/9/2026 • Data Breaches & Exposure Events • General
Logically vice president Patrick Jones discussed a Canvas cyberattack affecting schools in North Carolina and more than 9,000 schools globally.
5/9/2026 • Data Breaches & Exposure Events • General
Nye County School District said Instructure notified the district in 2025 of a Canvas cybersecurity incident affecting schools, prompting phishing-risk safeguards despite no internal-system compromise.
5/9/2026 • Data Breaches & Exposure Events • General
The George Washington University Law restricted Canvas access after an Instructure security incident caused a nationwide Canvas outage and potential data exposure concerns in 2026.
5/9/2026 • Data Breaches & Exposure Events • General
Instructure restored Canvas after a cyberattack, describing student ID, email, name, and message exposure claims while forensic review found no ongoing threat-actor access.
5/8/2026 • Data Breaches & Exposure Events • General
ShinyHunters claimed responsibility for a Canvas online learning platform breach in Topeka, Kansas, prompting restoration efforts and risks to student data.
5/8/2026 • Data Breaches & Exposure Events • General
San Antonio colleges reported Canvas disruptions Thursday as Instructure faced a hacking-group claim and potential large-scale student and instructor data exposure.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure Canvas was taken offline during a data-breach response affecting Washington community and technical colleges, potentially exposing student identities and messages.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure said Canvas outages on May 7 and a contained May breach affected schools in Iowa after a ShinyHunters ransomware claim regarding student data exposure.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure disabled Canvas during a ransomware-linked investigation after ShinyHunters claimed large-scale student and staff data access, while universities reported outages worldwide on May 7.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure restored Canvas access for Ohio State University on May 8 after a ransomware-linked breach exposed student names, emails, and student ID numbers.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure and ShinyHunters linked a Canvas ransomware attack in the United States to exposed student identifiers and finals-week access outages.
5/8/2026 • Cybersecurity (Privacy-Relevant) • General
Trinity Information Technology Services told universities on May 7 that Instructure shut down Canvas servers after a cyberattack tied to ShinyHunters threats and potential data leaks.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure detected Canvas unauthorized access in late April 2026, after ShinyHunters ransomware claims data exfiltration and login-page disruption affecting schools.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure Canvas and CourseWorks were disrupted by a cybersecurity incident in advance of final exams, raising potential student data exposure and phishing risks.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure disclosed investigation and recovery efforts for a Canvas nationwide outage tied to a ransomware claim, following a May 1 exposure of student identifiers and messages.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure disclosed May 1 unauthorized access to a Canvas database impacting thousands of college campuses, including Fresno State and State Center Community College District.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure reported two Canvas breach incidents in late April and early May, temporarily taking Canvas offline and disrupting Illinois universities during final exams.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure reported recovery after a Thursday ransomware attack on Canvas in the United States, as ShinyHunters claimed access to data from millions.
5/8/2026 • Data Breaches & Exposure Events • General
University of Colorado Boulder kept Canvas offline after a reported Instructure-linked cyberattack and ShinyHunters breach claims affecting schools and universities.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure confirmed a May 1 ransomware attack on Canvas, with ShinyHunters claiming exposure of 280 million student and faculty records across 8,000 schools.
5/8/2026 • Data Breaches & Exposure Events • General
Duval County Schools disabled Canvas after an Instructure ransomware breach attributed to Shiny Hunters, affecting 275 million people and raising identity theft concerns.
5/8/2026 • Data Breaches & Exposure Events • General
Infrastructure reported a May 2 cybersecurity incident affecting Canvas for Columbia University, disrupting finals and potentially exposing student names, emails, phone numbers, and student IDs.
5/8/2026 • Data Breaches & Exposure Events • General
In May 2025, Instructure investigated a claimed ransomware breach of Canvas that disrupted U.S. universities including Wisconsin and potentially exposed student identifiers and messages.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure cyberattack triggered Canvas LMS unscheduled maintenance at MTSU during finals season, while ShinyHunters threatened breach data release.
5/7/2026 • Data Breaches & Exposure Events • General
Pitt County Schools investigated an Instructure Canvas vendor breach notified in North Carolina after reports of exposure of student-related personal information.
5/7/2026 • Data Breaches & Exposure Events • General
On May 7, Ohio State University reported a national Canvas outage tied to an Instructure vendor breach claimed by ShinyHunters with ransom threats.
5/7/2026 • Data Breaches & Exposure Events • General
Baylor University delayed Friday finals after a ShinyHunters-linked Instructure breach caused a nationwide Canvas outage and extortion threat over student data.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure reported a May 1 Canvas security incident as California State University users experienced platform downtime May 7 amid threat-actor claims of student data exposure.
5/7/2026 • Data Breaches & Exposure Events • General
Seton Hall reported a Canvas outage on Thursday linked to an Instructure security incident after ShinyHunters claimed mass personal data theft.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure reported a May 1 Canvas breach and, by May 7, California colleges reported Canvas downtime while student identifiers and messages were listed as potentially exposed.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure reported a May 1 Canvas breach, and May 7 Canvas outages followed at California State University and other colleges while investigation continued.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure disclosed a May 1 Canvas breach as Canvas outages struck California State University campuses on May 7 and student data exposure risks included names, emails, student IDs, and messages.
5/7/2026 • Data Breaches & Exposure Events • General
University of Wisconsin advised students to avoid Canvas actions May 7 after Instructure investigated a May 1 cybersecurity incident affecting the Canvas platform.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure investigated a ransomware-linked Canvas incident after May 1 reporting, with Wisconsin schools notifying students and parents about possible exposure of student IDs and messages.
5/7/2026 • Data Breaches & Exposure Events • General
Park City School District reported that Instructure notified the district on May 5 of an April 25 Canvas breach exposing student and staff data in Utah.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure notified Dare County Schools in North Carolina after a Canvas incident involving a criminal threat actor detected April 29, 2026.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure reported a May 1 Canvas security incident as Canvas outages began May 7 across California universities, with possible exposure of student identifiers and messages.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure disclosed an April Canvas breach affecting North Carolina school districts, with first and last names potentially exposed and April 29 access revocation confirmed.
5/7/2026 • Data Breaches & Exposure Events • General
Wake County Public School System notified Cary, North Carolina families in mid-April after a Canvas cybersecurity breach potentially exposed student and staff personal data.
5/7/2026 • Data Breaches & Exposure Events • General
The University of Memphis confirmed a Canvas-related cyberattack in which Instructure said student names, emails, and student IDs may have been exposed.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure notified a school district in an ongoing incident involving Canvas, reporting access to student names, emails, Canvas IDs, and messages, with no confirmed password, birthdate, or government ID exposure.
5/7/2026 • Data Breaches & Exposure Events • General
Boston College IT reported a Canvas outage on Thursday as ShinyHunters claimed an Instructure breach and threatened data leakage unless affected universities negotiated a settlement.
5/7/2026 • Data Breaches & Exposure Events • General
Charlottesville City Schools reported a Canvas data-breach impact on parent accounts in Charlottesville, Virginia, with multifactor authentication limiting exposure for student and staff accounts.
5/6/2026 • Data Breaches & Exposure Events • General
In Minnesota, Wayzata Public Schools alerted families after Instructure reported a May 1, 2026 Canvas vendor-side breach with possible exposure of student and staff identifiers.
5/4/2026 • Cybersecurity (Privacy-Relevant) • General
ShinyHunters claimed major student-data access as Instructure investigated a Canvas outage and breach affecting universities and K-12 schools.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure CEO Steve Daly reported a Canvas cyberattack and data breach in Salt Lake City, USA, with further incident updates planned within 48 hours.
5/11/2026 • Cybersecurity (Privacy-Relevant) • General
Utah school districts and universities issued phishing and data-safety warnings after Instructure Canvas disclosed a cybersecurity incident.
5/8/2026 • Data Breaches & Exposure Events • General
Multiple US universities reported ShinyHunters ransomware notes on Instructure Canvas during spring finals week, while Instructure investigated reported student data exposure.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure restored Canvas access in North Carolina school districts on Monday after a May 7 vendor incident that exposed some student data and prompted extortion-related warnings.
5/11/2026 • Data Breaches & Exposure Events • General
Instructure disclosed a Canvas breach after ShinyHunters claimed stolen school-account data and threatened to leak it, prompting notifications across North Carolina districts.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure disclosed a Canvas learning platform data breach in late April, confirmed cybercriminal involvement on May 1, and reported personal data exposure.
5/26/2026 • Data Breaches & Exposure Events • General
Instructure disclosed a cybersecurity incident affecting Canvas LMS customers in 2026, prompting education institutions to address FERPA obligations, phishing risks, and incident response.
5/14/2026 • Data Breaches & Exposure Events • General
Jane Doe filed a class action in Waco, Texas, against Instructure after ShinyHunters allegedly breached Canvas and forced final exam disruptions in May.
5/14/2026 • Data Breaches & Exposure Events • General
Instructure confirmed a May 2026 Canvas data breach and a May 11 agreement to pay ShinyHunters an undisclosed ransom in the United States.
5/13/2026 • Data Breaches & Exposure Events • General
In Oregon, Portland Public Schools and other districts notified families after Instructure Canvas faced a vendor breach with potential exposure of student data.
5/7/2026 • Data Breaches & Exposure Events • General
Instructure reported a May 7, 2026 Canvas breach that disrupted colleges nationwide during finals week and involved unauthorized access tied to Free-For-Teacher accounts.
6/2/2026 • Data Breaches & Exposure Events • General
A Canvas cybersecurity incident at California State University campuses led CFA to dispute breach notice adequacy as CSU worked with Instructure on data-exposure scope.
5/14/2026 • Data Breaches & Exposure Events • General
Wisconsin Consumer Protection director Mike Domke said Canvas faced a data breach earlier this month and urged parents to freeze student credit.
5/19/2026 • Data Breaches & Exposure Events • General
Instructure reached an agreement with ShinyHunters after a recent attack on the Canvas learning platform exposed stolen student and faculty data.
5/18/2026 • Data Breaches & Exposure Events • General
Boise State University notified students on May 13 about a Canvas cybersecurity breach, citing Instructure and ShinyHunters agreement and ongoing review.
5/14/2026 • Data Breaches & Exposure Events • General
Instructure said after a Canvas cyberattack that disrupted schools during finals, stolen student data was returned and purportedly destroyed, while forensic review continued.
5/12/2026 • Cybersecurity Tech (Privacy-Relevant) • General
Instructure reported that a cyberattack on Canvas disrupted student and faculty access worldwide and exposed potentially sensitive education data before stolen files were returned.
5/12/2026 • Cybersecurity Tech (Privacy-Relevant) • General
ShinyHunters claimed a Canvas cyberattack affecting thousands of school districts and universities, including North Texas sites, leading to breach alerts and account-protection guidance.
5/9/2026 • Data Breaches & Exposure Events • General
James Madison University received Canvas breach notification from Instructure in the spring 2026 semester during a short-lived outage tied to a ransomware claim.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure said a May 7 security incident disabled Canvas for hours, disrupting U.S. schools while ShinyHunters claimed data access across thousands of institutions worldwide.
5/8/2026 • Data Breaches & Exposure Events • General
Instructure took Canvas offline on Friday after ShinyHunters exploited Free-For-Teacher accounts, disrupting Maryland schools and colleges before full restoration the same day.
5/8/2026 • Data Breaches & Exposure Events • General
Universities of Wisconsin issued breach-related guidance in Wisconsin after Instructure reported a May 1 Canvas learning management system breach by a criminal threat actor.
5/7/2026 • Cybersecurity (Privacy-Relevant) • General
University of Missouri reported a Canvas outage on Thursday, while a SHINYHUNTERS message warned of potential data leakage by May 12.
5/7/2026 • Data Breaches & Exposure Events • General