Hackers Hit Major EdTech Vendor, Threaten Data Leak
TL;DR
Cybercriminals from ShinyHunters breached Instructure, the maker of Canvas LMS used by roughly 41% of colleges, potentially affecting up to 9,000 schools and 275 million people. They issued a 'PAY OR LEAK' ransom and warned of releasing private messages if payment wasn’t made; Instructure says it has contained the breach, revoked privileged credentials, rotated keys, and increased monitoring, with data exposed mainly names, emails, and student IDs. Security experts say the attack illustrates vendor-supply-chain risk in higher education, as attackers target platforms used across thousands of institutions rather than individual campuses.
- “PAY OR LEAK”: Hackers Target Big Higher Ed Vendor Inside Higher Ed
- Millions of students’ personal data stolen in major education breach Malwarebytes
- ShinyHunters: Instructure breach affects 275 million teachers and students Mashable
- Canvas Breach May Put 275M Users, 9,000 Schools at Risk TechRepublic
- Educational tech firm Instructure data breach may have impacted 9,000 schools Security Affairs
Want the full story? Read the original reporting
Read on Inside Higher Ed