Columbia University affected by Instructure data breach
SpilloverSpillover from the Instructure incident · View original incident →Columbia University was affected by the Instructure data breach. Columbia University issued a statement on the incident on 6 May 2026.
Key facts
- Affected organisation
- Columbia University
- Original incident
- Instructure Canvas hack leaks pupil and teacher data
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Not confirmed
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Columbia University issued a statement on the Instructure data breach.
Original incident
This is spillover from the Instructure incident.
Instructure Canvas hack leaks pupil and teacher data
275mImpact: Data on 275 million users at around 8,800 schools and universities, according to the attackers
Education technology company Instructure confirmed a data breach related to its Canvas platform. ShinyHunters claimed to have stolen data on 275 million users at around 8,800 schools and universities, and school login pages were defaced and services disrupted. The company reached an agreement with the attackers to prevent the data from being released, and US lawmakers demanded an explanation from the company.
Related reports: 36 · last report →
2 related reports
Other incidents at Columbia University
Columbia University cyber-attack exposes personal data of about 3.1 million people
3.1mImpact: Personal information of about 3.1 million people
A cyber-attack on Columbia University in June 2025 disrupted IT services and exposed personal information. The number of people affected rose from an initial estimate of about 870,000 to about 3.1 million, and the exposed information included Social Security numbers, financial account details, academic records and medical information. The university agreed to pay US$16.1 million to settle related litigation, and an investigation in October 2026 found no evidence that the stolen information had been sold or distributed on the dark web.
Related reports: 32 · last report →Class action filed over Columbia University sensitive data leak
Impact: Leak of sensitive information
A class action lawsuit was filed after sensitive information was leaked at Columbia University. The lawsuit alleges that the university failed to adequately protect sensitive information.
Read on Top Class Actions ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.