ACCORDING to Malwarebytes, Instructure, the company behind the Canvas learning management system, confirmed a cyber incident and subsequent data breach affecting its cloud-hosted environment. The ShinyHunters ransomware group claims it is behind the attack and says it stole roughly 275 million records tied to students, teachers and staff.
The criminals shared a list of 8,809 school districts, universities and online education platforms with BleepingComputer, whose Canvas instances they claim were impacted, with per-institution record counts ranging from tens of thousands to several million. The article notes that the breach appears to involve a broad set of education providers, and that the number of affected records is tied to the institutions’ data exposed.
Published on 6 May 2026, the piece also offers guidance for parents and schools on how to respond and how to protect accounts and identities going forward.