ShinyHunters Threaten to Leak Schools’ Data in Claimed Instructure Canvas LMS Breach
Summary
ShinyHunters claim responsibility for a breach involving Instructure’s Canvas LMS and threaten to leak a list of affected schools unless a settlement is reached by May 7, 2026. The post says the claim is unconfirmed.
Key points
- ShinyHunters claim responsibility for a breach involving Instructure’s Canvas LMS and threaten to release a list of affected schools.
- The group demands a settlement by the end of May 7, 2026, and says Instructure has not engaged with them.
- The post claims a downloadable file contains the list of affected schools.
- The post says the information is based on the group’s public claims and that its accuracy cannot be confirmed.
- The record is attributed to monitoring by ransomware.live; no confirmation from Instructure is included.
Article Details
- Victim
- Instructure
- Claim Date
- 2026-05-05
- Encryption Status
- Unknown; the article does not report whether data was encrypted.
- Exfiltration Status
- Unverified; ShinyHunters claim to have data from the breach and threaten to leak it.
- Exfiltrated Data
- The group claims the data concerns affected schools; the article describes a list of affected schools but does not confirm the data's authenticity.
- Ransom Demand
- A settlement was demanded, but the amount was not disclosed.
- Leak Status
- Threatened; ShinyHunters set a May 7, 2026 deadline. No leak is confirmed in the article.