Over May 6 and 7, 2026, Canvas learning management system (LMS) users were served up a defaced web page in place of the expected login page. The altered web page displayed a warning by the ShinyHunters criminal hacker and extortion group advising of the Instructure compromise. Instructure, a leading educational technology…
Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak.
ShinyHunters says its shinyhunte.rs domain was suspended after the Canvas LMS attacks, forcing the group to move fully to its dark web (.onion) site.
A major cyber security breach involving the educational platform Canvas has disrupted schools and universities across the United States, with reports suggesting some institutions have directly contacted hackers in an effort to prevent stolen data from being leaked. Read More: Canvas warns schools after major student data breach According to Reuters, the hacking group ShinyHunters claimed […]
Messages could include "medical circumstances, accessibility accommodations, disputes, sexual assault allegations," and more.
Hackers breached Instructure again, defacing Canvas login pages after a prior data theft exposing student information and pressuring the company.
ShinyHunters hackers defaced the official Canvas LMS portal after breaching Instructure systems, disrupting university access worldwide.
The hackers have issued a May 12 ultimatum to affected schools and Instructure, Canvas’s parent company.
The post Criminal hacker group ShinyHunters breaches Canvas appeared first on The Stanford Daily.
ShinyHunters breached Instructure and Vimeo, exposing millions of student and user records through direct and supply chain attacks.