Canvas Learning Platform Down After ShinyHunters Data Breach

Canvas platform experiences outage following confirmed data breach by ShinyHunters. Student information including names, emails, and IDs compromised across multiple schools.
The Canvas learning management system, owned by education technology company Instructure, has gone offline following confirmation of a significant data breach that has left educational institutions and students scrambling to understand the scope of the security incident. The outage occurred Thursday as the platform became inaccessible to users nationwide, with students attempting to log in encountering error messages and service unavailability notifications. This latest incident marks another serious security failure for one of the most widely deployed educational technology platforms in use today, affecting thousands of schools and millions of students across the country.
According to official statements from Instructure's status page, the data breach has confirmed the exposure of sensitive student information including full names, email addresses, institutional ID numbers, and private messages exchanged through the platform. The compromised data represents a significant privacy violation for students who rely on Canvas for coursework submission, grade tracking, and communication with instructors and peers. The scope of the incident appears to span multiple educational institutions, suggesting a widespread vulnerability that affected numerous schools simultaneously. Parents and students are now grappling with concerns about identity theft, unauthorized access to personal information, and potential misuse of exposed data.
The hacking collective known as ShinyHunters has claimed responsibility for the attack, asserting that they previously attempted to contact Instructure about security vulnerabilities without receiving a response from company leadership. In a message that appeared to students attempting to access the platform, the group stated their frustration with the company's approach to remediation, saying that Instructure chose to implement superficial
Source: The Verge


