Canvas school login portals hacked as Instructure hack apparently gets even worse

Date:
Fri, 08 May 2026 12:05:00 +0000

Description:
ShinyHunters really wants a pay day, and has moved the deadline again.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter ShinyHunters briefly hijacked login portals for ~330 institutions, posting ransom demands and threats The group extended its deadline to May 12, warning of full data leaks if no settlement is reached Instructure confirmed the earlier breach but maintains sensitive financial and ID data was not exposed The Instructure cyberattack has apparently reached a new level as, in order to pressure victims into paying a ransom demand, ShinyHunters has defaced Canvas login portals for hundreds of colleges and universities.

Members of roughly 330 educational institutions were met with an entirely different welcome message when trying to log into the Canvas learning system following the next stage of the group's attack. "ShinyHunters has breached Instructure (again). Instead of contacting us to resolve it they ignored us and did some 'security patches'," the message said. "If any of the schools in the affected list are interested in preventing the release of their data, please consult with a cyber advisory firm and contact us privately at TOX to negotiate a settlement. You have till the end of the day by May 12 2026
before everything is leaked." Latest Videos From You may like Top
universities among victims named in Canvas data breach Canvas maker Instructure reveals data breach confirms user personal information leaked 11 million students possibly at risk after classroom software used by millions hacked Pushing the deadline The defacement message was reportedly visible for roughly half an hour, before being pulled by Canvas team.

Instructure, the company behind the Canvas system, recently notified its
users about suffering a cyberattack and losing sensitive customer data. Instructure said the crooks accessed certain identifying information of users at affected institutions, including names, email addresses, student ID numbers, and user communications.

At the same time, ShinyHunters added Instructure to their data leak site, claiming the attack affected nearly 9,000 schools and 275 individuals worldwide.

"Several billions of private messages among students and teachers and
students and other students involved, containing personal conversations and other PII. Your Salesforce instance was also breached, and a lot more other data is involved." Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners
or sponsors By submitting your information you agree to the Terms &
Conditions and Privacy Policy and are aged 16 or over.

It seems Instructure wasnt interested in negotiating with the miscreants, since earlier this week, they updated their site, name-dropped multiple high-profile universities, and pushed the deadline to May 7.

Now, the deadline seems to have been pushed again, this time to May 12.

Passwords, dates of birth, government identifiers, or financial information, were not involved, and the company revoked privileged credentials and access tokens associated with affected systems in order to mitigate the threat.

Via BleepingComputer The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/canvas-school-login-portals-hacked-as-i nstructure-hack-apparently-gets-even-worse


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)