Hackers Hit Major EdTech Vendor, Threaten Data Leak

Cybercriminals from ShinyHunters breached Instructure, the maker of Canvas LMS used by roughly 41% of colleges, potentially affecting up to 9,000 schools and 275 million people. They issued a 'PAY OR LEAK' ransom and warned of releasing private messages if payment wasn’t made; Instructure says it has contained the breach, revoked privileged credentials, rotated keys, and increased monitoring, with data exposed mainly names, emails, and student IDs. Security experts say the attack illustrates vendor-supply-chain risk in higher education, as attackers target platforms used across thousands of institutions rather than individual campuses.