A data extortion attack by the cybercrime group ShinyHunters targeted Instructure's Canvas platform, leading to a defaced login page with a ransom demand. The breach exposed identifying information of 275 million users across 9,000 institutions, including names, email addresses, student IDs, and messages. Instructure confirmed the incident was contained but later faced renewed disruptions as ShinyHunters pushed ransom deadlines.
| Vendor | Product | Versions |
|---|---|---|
| instructure | canvas | — |
