All articles tagged with #canvas
Instructure says it reached an agreement with the ShinyHunters hackers after a breach of the Canvas LMS; the stolen data has reportedly been returned and the company asserts that no customers will be extorted as a result of the incident, though it’s unclear if a ransom was paid. Instructure also says data destruction was verified, most systems are back online, and it will share more details in a forthcoming webinar.
Georgia Tech announced that data stolen in a breach of the Canvas education platform has been deleted under a deal with the attackers, after IT warned students and staff about the cybersecurity incident.
Instructure, the company behind the Canvas learning platform, says it reached a deal with the hackers (ShinyHunters) responsible for a major breach, secured the stolen data back, and obtained digital proof that remaining copies were destroyed via shred logs. The incident compromised student IDs, email addresses, names and messages for thousands of schools and hundreds of millions of people, though no passwords or financial data were found. Canvas was taken offline during the investigation, and the company is conducting forensic work and hardening its systems while students faced finals-related disruptions.
A major hack knocked Canvas offline across California State University campuses and 116 community colleges, disrupting assignments and exams for more than a million students. While officials say core learning data wasn’t exposed, the outage highlights the vulnerability of centralized education software and has sparked calls for better data protections and potential audits of edtech reliance in the state.
Instructure says it reached an agreement with the hackers behind the Canvas breach, returned the stolen data, and obtained digital confirmation that remaining copies were destroyed, though there’s no absolute certainty data is fully erased. The incident, claimed by ShinyHunters, affected about 9,000 schools and up to 275 million individuals, exposing student IDs, names, emails and messages and briefly disrupting Canvas access during investigations and exams; the company will continue forensic analysis and system hardening.
Instructure paid a ransom to the ShinyHunters gang after Canvas was breached twice, returning data for about 275 million users across 8,800 institutions and promising no extortion of customers. The monetary amount wasn’t disclosed, the deal arrived before a May 12 deadline, and Canvas environments are back online as investigators continue forensic work and security hardening.
Instructure confirmed attackers exploited multiple cross-site scripting flaws in the Canvas Free-for-Teacher environment to hijack authenticated admin sessions, deface login portals, and trigger a ransom demand by ShinyHunters. The initial breach exposed data from about 8,809 educational organizations, with ShinyHunters claiming as many as 275 million records stolen; the defacement itself did not involve direct data loss, and Canvas has since been restored after a temporary shutdown.
Needham Public Schools say the Canvas data breach could have affected all students and staff, with teacher gradebook data possibly modified in PowerSchool. The district disconnected Canvas from PowerSchool to prevent further compromise and is awaiting a full incident report from Instructure, while continuing to monitor for additional affected systems.
The Canvas learning management system—used by thousands of schools—was knocked offline by a cyberattack but has since come back online, allowing classes to resume as investigators look into the incident.
A cyberattack on Instructure's Canvas learning-management system knocked the platform offline for thousands of schools and universities across the U.S., with the ShinyHunters group claiming responsibility and threatening data leaks; exams and finals were canceled at several campuses as the outage persisted, but Canvas gradually returned for most users by nightfall and investigations continued.
Multiple North and South Carolina school districts report a Canvas data breach; while basic directory-style data such as student names and IDs may have been accessed, officials say passwords, birth dates, financial data, and government identifiers were not involved, and there is no evidence of ongoing unauthorized access as investigators coordinate with Instructure to secure accounts.
ShinyHunters took Penn’s Canvas offline, claiming a vulnerability in Instructure and demanding a settlement to prevent a data leak, with a May 12, 2026 deadline; the group says it has access to hundreds of millions of user records, including Penn emails, names, Penn IDs, and course enrollments, and Penn is investigating with Instructure and law enforcement while other institutions are affected.
A cyberattack on Canvas, the widely used learning management system, may have exposed names, email addresses, student ID numbers, and messages for millions of users, including many Utah schools; financial data, dates of birth, SSNs, and passwords were not involved; the hacker group ShinyHunters claimed credit, and Instructure says the incident is resolved with ongoing scope investigation; Utah law requires parent notification, and while overall identity theft risk is low, data could be used for phishing.
A hacker group called ShinyHunters claims it stole 280 million student and staff records from 8,809 schools, districts, and online education platforms through a breach of Instructure's Canvas, exposing names, email addresses, and private messages; the alleged list of affected institutions hasn’t been independently verified, universities are assessing potential impact, and Instructure hasn’t publicly responded.
Spotify now lets you turn off all video content across the app with universal toggles for Canvas, music videos, and all other video content under Settings > Content and display, with changes applying across platforms and (for family plans) across members.