ShinyHunters Cyberattack Disrupts Canvas
Analysis based on 46 articles · First reported May 07, 2026 · Last updated May 09, 2026
The cyberattack on Instructure by ShinyHunters significantly impacted the education sector, causing widespread disruptions to academic schedules and raising concerns about data privacy for millions of students and educators. Instructure, the parent company, faces reputational damage and potential financial repercussions, while cybersecurity firms like Emsisoft see increased demand for their services.
A major cyberattack by the hacking group ShinyHunters targeted Instructure, a widely used online learning platform by Instructure, causing widespread outages for thousands of schools and universities globally. The attack occurred during final exam season, leading to chaos as students lost access to course materials and some institutions, including the University of Texas at San Antonio, the University of Massachusetts Boston, and the University of Illinois Urbana-Champaign, had to postpone exams. ShinyHunters claimed responsibility and threatened to leak billions of private messages and records, although Instructure and Instructure were later removed from the group's leak site. Instructure managed to restore services for most users, but concerns about data privacy, including student ID numbers, email addresses, and names, remain. The incident highlights the vulnerability of educational institutions to cyber threats and the need for robust cybersecurity measures.
Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.
Open Dashboard