ShinyHunters Claims Canvas Data Breach
Coverage from ABC13 Houston, Courier Journal, and others

A security incident at Instructure temporarily disrupted Canvas, a learning management platform used by schools and universities, during final examinations and other academic activities.
ShinyHunters claimed responsibility and alleged access to data from hundreds of millions of users, while Instructure reported unauthorized access involving names, email addresses, student ID numbers, and Canvas messages but said it had found no evidence of exposure of passwords, government identifiers, dates of birth, or financial information. The incident matters because a centralized education platform outage affected coursework, exams, and communications across institutions, while the scope of any data compromise remains under investigation.
The main update is a sharper attribution and scale claim: ShinyHunters now explicitly claims responsibility and alleges access to data from hundreds of millions of users, while Instructure’s account remains limited to confirmed categories of exposed information. The story also broadens slightly from a pure outage report to include ongoing investigation and phishing-risk guidance.
The main update is a sharper, more specific account of the breach: Instructure now says the incident involved Free-For-Teacher accounts and exposed particular user data categories, while ruling out several sensitive fields. ShinyHunters’ ransom and scale claims are also more explicit, but remain unverified.
