Tracked topic
Instructure confirms hackers used Canvas flaw to deface portals By Ionut Ilascu May 11, 2026 11:26 AM Education technology giant Instructure has confirmed that a security vulnerability allowed hackers to modify Canvas login portals and leave an extortion message. …
… House Committee on Homeland Security is calling on Instructure executives to testify about two cyberattacks by the ShinyHunters extortion group that targeted the company& 039;s Canvas platform, allowing threat actors to steal student data and disrupt schools during final exams.
… Out of an abundance of caution, we immediately took Canvas offline to contain access and further investigate,” Instructure said in a statement to The Verge. “We regret the inconvenience and concern this may have caused.” Media: https://www.reddit.com/r/UTSA/comments/1t6lsdw/canvas got hacked/ Accor… …
… Download Now Related Articles: Instructure hacker claims data theft from 8,800 schools, universities Instructure confirms data breach, ShinyHunters claims attack US govt seeks Instructure testimony on massive Canvas cyberattack Instructure confirms hackers used Canvas flaw to deface portals Canvas … …
https://downdetector.com/status/instructure Every instance I can check shows this message from SHINYHUNTERS: https://imgur.com/a/PhBrNXq (EDIT: Instructure has gotten rid of the group's message in favor of their own down…
So apparently Canvas got hacked by ShinyHunters (3?!) times and is currently completely down. The cybercriminal group said the deadline is on May 12st, and if Instructure doesn't comply, they'll leak the PII of all stude…
Across all major ShinyHunters campaigns (AT&T/Snowflake, Salesforce, Canvas/Instructure), only one event has both a publicly stated payment amount and a known approximate settlement date: the May 2024 AT&T payment of ~5.…
… Last week, Instructure said hackers had exploited Free-For-Teacher accounts to breach its systems and responded by temporarily shutting down those accounts. Instructure has not announced when access to Free-For-Teacher accounts will be restored.
… You have till the end of the day by May 12 2026 before everything is leaked." Pushing the deadline The defacement message was reportedly visible for roughly half an hour, before being pulled by Canvas’ team. …
… Instructure is mostly known for Canvas, its cloud-based management system used by educational institutions to host course websites and readings, grade assignments, and provide discussion boards, among other uses. …
… Topics Canvas , cyberattack , cybersecurity , Education , instructure , Security , shinyhunters When you purchase through links in our articles, we may earn a small commission . …
… Instructure cautioned affected Canvas users against individual attempts to contact or bargain with the ShinyHunters group, saying its agreement "covers all impacted Instructure customers." The hacker group first infiltrated Canvas systems on April 29, using a security flaw tied to Free-For-Teacher … …