Instructure Pays Ransom to Canvas Hackers- How, What, When and Why

Guest Author
The education sector is once again facing a harsh cybersecurity reality - Centralised digital learning platforms create centralised cyber risk. In May 2026, the Instructure-Canvas cybersecurity incident escalated into a global education-sector concern. Threat actors associated with ShinyHunters claimed exposure involving approximately 275 million users, nearly 9,000 institutions, and several terabytes of educational data.