Week 19, 2026 security incident report
Hacking and data breach incidents newly reported 2026.05.04 ~ 05.10
From 4 to 10 May 2026, one new incident was recorded in South Korea, with a damages ruling involving a blockchain company that suffered hacking losses on the order of 100 billion won treated as the main issue. By type across South Korea and abroad, hacking/intrusions (35) and personal data leaks (19) accounted for the majority, followed by ransomware (3) and malware (1). Overseas, the Instructure Canvas hack was the biggest case, leading, according to the attackers' claims, to a leak of data related to about 8,800 educational institutions and 275 million users, chain damage at multiple schools and universities, and disruptions to classes, assignments and exams; production and business disruptions at Foxconn's North American plant and the leak of personal data on about 200,000 Zara customers also emerged as major incidents.
By type
- Hacking & intrusion31
- Data breach19
- Ransomware3
- Malware1
Key incidents in South Korea
Personal information of about 200,000 Zara customers leaked
200kImpact: Personal information of about 200,000 customers
Customer personal information was leaked from Zara in a security incident linked to a third-party analytics provider. The number of people affected was initially reported as 197,000 and later put at about 200,000. Zara's Korean subsidiary acknowledged the leak and reported it to the authorities, and allegations of a ransomware attack were also raised.
Related reports: 6 · last report →Court orders blockchain firm hit by 100-billion-won hack to pay damages
Impact: Hacking losses in the 100-billion-won range
A court ordered a blockchain company that suffered hacking losses in the 100-billion-won range to pay substantial damages to users. The company's name, the specific amount of damages and the date of the hack have not been confirmed.
Read on 연합뉴스 ↗
Supply-chain breaches
Canvas learning platform hack causes data leak and exam disruption
Impact: Leak of student and staff data and disruption of classes and exams at many US schools
A hack of Canvas, the learning platform run by Instructure, led to a data leak and service outages at many US schools. During May final exams, students were unable to complete their tests, and Boise State University cancelled some finals. Instructure said the hackers returned the data after extortion over the stolen information.
Related reports: 184 · last report →
Also affected: 4- Charlotte-Mecklenburg SchoolsCharlotte-Mecklenburg Schools students and staff hit by Canvas data breachStudents and staff affected; scale unknown
- Hillsborough County Public SchoolsHillsborough County Public Schools hit by nationwide Canvas data breach
- Duke UniversityDuke University affected by Canvas cyber-attack
- Brown UniversityBrown University's Canvas hacked in nationwide cyber-attack
Instructure Canvas hack leaks pupil and teacher data
275mImpact: Data on 275 million users at around 8,800 schools and universities, according to the attackers
Education technology company Instructure confirmed a data breach related to its Canvas platform. ShinyHunters claimed to have stolen data on 275 million users at around 8,800 schools and universities, and school login pages were defaced and services disrupted. The company reached an agreement with the attackers to prevent the data from being released, and US lawmakers demanded an explanation from the company.
Related reports: 36 · last report →
Canvas learning platform hack leaks pupil data and disrupts lessons
275mImpact: Student and staff data compromised and lessons, assignments and exams disrupted; 8,809 educational institutions and 275 million users according to the attackers
The Canvas learning platform was hacked, giving access to student and staff data and disrupting the use of assignment and exam tools. ShinyHunters claimed to have stolen data from 8,809 educational institutions and 275 million users worldwide and threatened to publish it. Security patches were applied and services restored, but a repeat breach and service disruption were also reported.
Related reports: 18 · last report →
Key incidents in other countries
Instructure Canvas hack leaks pupil and teacher data
275mImpact: Data on 275 million users at around 8,800 schools and universities, according to the attackers
Education technology company Instructure confirmed a data breach related to its Canvas platform. ShinyHunters claimed to have stolen data on 275 million users at around 8,800 schools and universities, and school login pages were defaced and services disrupted. The company reached an agreement with the attackers to prevent the data from being released, and US lawmakers demanded an explanation from the company.
Related reports: 36 · last report →Canvas learning platform hack leaks pupil data and disrupts lessons
275mImpact: Student and staff data compromised and lessons, assignments and exams disrupted; 8,809 educational institutions and 275 million users according to the attackers
The Canvas learning platform was hacked, giving access to student and staff data and disrupting the use of assignment and exam tools. ShinyHunters claimed to have stolen data from 8,809 educational institutions and 275 million users worldwide and threatened to publish it. Security patches were applied and services restored, but a repeat breach and service disruption were also reported.
Related reports: 18 · last report →Cyber-attack on Foxconn's North American plants disrupts production and operations
Impact: Network and operational disruption at some North American plants; attackers claim theft of 8TB and 11 million files
Foxconn's North American plants were hit by a cyber-attack that disrupted networks and operations, forcing some staff to switch to manual working. The ransomware group Nitrogen claimed to have stolen 8TB of data, or 11 million files, including confidential material relating to Apple and Nvidia. The company confirmed the attack and said production at the affected plants was returning to normal.
Related reports: 18 · last report →Data of thousands of Atrium patients in Charlotte area leaked
Impact: Data of thousands of patients in the Charlotte area
Thousands of Atrium patients in the Charlotte area of the US were affected by a data breach. The specific data leaked and the response have not been confirmed.
Related reports: 6 · last report →SDCCD campus network and websites down after attempted cyber-attack
Impact: Campus network and websites down
SDCCD's campus network and websites went down after a failed cyber-attack attempt over the weekend. The exact date of the incident, the attack method, and the recovery and response have not been confirmed.
Related reports: 4 · last report →