Instructure Canvas hack leaks pupil and teacher data
Education technology company Instructure confirmed a data breach related to its Canvas platform. ShinyHunters claimed to have stolen data on 275 million users at around 8,800 schools and universities, and school login pages were defaced and services disrupted. The company reached an agreement with the attackers to prevent the data from being released, and US lawmakers demanded an explanation from the company.
Key facts
- Affected organisation
- Instructure
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Data on 275 million users at around 8,800 schools and universities, according to the attackers
- Cause / method
- Hacking and data theft claimed by ShinyHunters
- Location
- Other countries
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Instructure confirmed a data breach, and ShinyHunters claimed to have stolen data on 275 million users.
- The attackers claimed to have stolen data from around 8,800 schools and universities.
- The defacement of school login pages and further hacking claims were reported.
- Instructure said it had reached an agreement with the attackers.
- An agreement with the attackers to prevent the release of 3.65TB of Canvas data was reported.
- US lawmakers demanded an explanation from Instructure regarding the Canvas data breach and service disruption.
Also affected by this incident
Columbia University affected by Instructure data breach
↳ Knock-on damage from the Instructure incident · View original incidentColumbia University was affected by the Instructure data breach. Columbia University issued a statement on the incident on 6 May 2026.
Related reports: 2 · last report →Texas Tech University RaiderCanvas data breach
↳ Knock-on damage from the Instructure incident · View original incidentData was leaked from Texas Tech University's RaiderCanvas. Instructure confirmed the RaiderCanvas data breach.
Read on The Daily Toreador ↗
36 related reports
- Edtech Firm Instructure Discloses Data Breach Amid Hacker Leak Threats
- Instructure Data Breach by ShinyHunters puts Students and Teachers to Cyber Risks
- ShinyHunters claims Instructure breach, data from 275M users stolen
- Instructure confirms data breach, ShinyHunters claims responsibility
- Hackers steal students’ data during breach at education tech giant Instructure
- Educational tech firm Instructure data breach may have impacted 9,000 schools
- Instructure hacker claims data theft from 8,800 schools, universities
- Instructure confirms cybersecurity incident
- Millions of students’ personal data stolen in major education breach
- Instructure Breach Exposes Schools' Vendor Dependence
- Instructure Canvas Data Breach: ShinyHunters Hack Exposes Student Information at 8,800+ Schools and Universities
- Instructure data breach exposes education sector to extortion
- Data breach of Utah-based company leads to nationwide issues; Local school districts experience data leak
- Hackers deface school login pages after claiming another Instructure hack
- Canvas returns after ShinyHunters ransomware attack on Instructure -
- Education Sector in the Crosshairs: ShinyHunters' Extortion Campaign Against Instructure
- Utah-based tech company Instructure hacked, affecting millions of users globally
- Canvas school login portals hacked as Instructure hack apparently gets even worse
- What Is the Instructure Canvas Breach? Impact, Risks, and What Institutions Should Do
- Instructure CEO apologizes after Canvas cyberattack causes data breach
- Company owning Canvas says it reached agreement with hackers
- Instructure Data Breach Exposes Student Records Across 9,000 Schools
- Canvas Gets Schooled: EdTech Data Breach Litigation Puts Instructure in the Hot Seat (via Passle)
- Canvas hacked: After Canvas Instructure cyberattack ransomware agreement reached, personal information could still be at risk
- Canvas owner reaches ‘agreement’ with threat actors after data breach
- Canvas data breach resolved, Instructure CEO apologizes
- Canvas' parent company reaches agreement with hacking group behind breach
- Three separate lawsuits filed against Instructure after data breach
- Instructure reaches 'agreement' with ShinyHunters to stop data leak
- Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak
- Instructure reaches agreement with hacker after data breach, global outage
- Government to Scrutinize Instructure Over Canvas Disruption, Data Breach
- US lawmakers demand answers from Instructure after Canvas data breaches
- Canvas Hack: Why did Instructure Pay Ransom to ShinyHunters?
- Instructure reaches agreement with hackers after Canvas data breach
- Instructure settles with hackers following massive student data theft
Other incidents at Instructure
Canvas learning platform hack causes data leak and exam disruption
Impact: Leak of student and staff data and disruption of classes and exams at many US schools
A hack of Canvas, the learning platform run by Instructure, led to a data leak and service outages at many US schools. During May final exams, students were unable to complete their tests, and Boise State University cancelled some finals. Instructure said the hackers returned the data after extortion over the stolen information.
Related reports: 184 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.