Last Update: 09/22/2026 at 11:34 PM EST

ShinyHunters Claims Canvas Data Breach

Coverage from ABC13 Houston, Courier Journal, and others

ShinyHunters Claims Canvas Data Breach topic image

A security incident at Instructure temporarily disrupted Canvas, a learning management platform used by schools and universities, during final examinations and other academic activities.

ShinyHunters claimed responsibility and alleged access to data from hundreds of millions of users, while Instructure reported unauthorized access involving names, email addresses, student ID numbers, and Canvas messages but said it had found no evidence of exposure of passwords, government identifiers, dates of birth, or financial information. The incident matters because a centralized education platform outage affected coursework, exams, and communications across institutions, while the scope of any data compromise remains under investigation.

Looking Back
2 Day Timeline
May 7May 8
History
07/23/2026

The main update is a sharper attribution and scale claim: ShinyHunters now explicitly claims responsibility and alleges access to data from hundreds of millions of users, while Instructure’s account remains limited to confirmed categories of exposed information. The story also broadens slightly from a pure outage report to include ongoing investigation and phishing-risk guidance.

07/22/2026

The main update is a sharper, more specific account of the breach: Instructure now says the incident involved Free-For-Teacher accounts and exposed particular user data categories, while ruling out several sensitive fields. ShinyHunters’ ransom and scale claims are also more explicit, but remain unverified.

All Articles3 articles
Additional3 articles · CI Score below 45
ABC13 Houston
5/8/2026 • Data Breaches & Exposure Events • General
Courier Journal
5/8/2026 • Data Breaches & Exposure Events • General
The Setonian
5/7/2026 • Data Breaches & Exposure Events • General