US Congress calls Instructure CEO as it investigates Canvas breach

Date:
Wed, 13 May 2026 16:05:00 +0000

Description:
Steve Daly was called in to testify about the two ShinyHunters incidents that left students stranded.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Instructure CEO Steve Daly called to testify before US House Homeland Security Committee Hearing will cover breach details, data volume, containment steps, and customer notifications Daly previously confirmed ransom payment to ShinyHunters, with data shred logs and promises of no further extortion Instructure CEO Steve Daly has been was called to testify in front of the US House Committee on Homeland Security regarding the recent ShinyHunters attack on the company and its flagship product, Canvas .

The testimony should take place on May 21 at the latest, and will discuss the circumstances of the incident, the nature and volume of data accessed, and
the steps the company took to contain the threat and notify affected individuals. In early May 2026, news broke that Instructure, the edtech giant behind the popular Canvas learning system, suffered a cyberattack and lost sensitive customer data. Hours later, ShinyHunters added Instructure to its data leak site, saying the breach affected thousands of schools and 275 million individuals, including students, teachers, and other staff. Latest Videos From You may like Canvas maker Instructure reveals data breach confirms user personal information leaked Top universities among victims
named in Canvas data breach 'You deserved more': Instructure CEO apologizes following Canvas hack, admits company paid hackers to get stolen data back Available on Pixels A few days later, the group struck Instructure the second time, defacing the login portal and leaving a ransom note for all victims to see. At the same time, the group said that the stolen files include data from Harvard, MIT, Oxford , and a handful of other elite, world-leading research universities.

While law enforcement usually advises against paying the attackers their ransom demand, Instructure caved in and paid up which also, as is hinted in the invitation letter, might be the reason why Daly was called in to testify in the first place.

The scale and timing of the Instructure breach, and the demonstrated
inability of a major educational technology vendor to contain a threat actor following an initial intrusion, are precisely the kind of systemic vulnerabilities this Committee has a responsibility to examine, the
invitation letter reads.

When Daly announced the agreement with ShinyHunters in a blog post earlier this week, he said the data was returned and the company got shred logs as proof ShinyHunters are no longer in possession. ShinyHunters also apparently promised Daly that Instructure customers (schools and individuals alike)
would not be extorted. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners
or sponsors By submitting your information you agree to the Terms &
Conditions and Privacy Policy and are aged 16 or over.

Via BleepingComputer The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/us-congress-calls-instructure-ceo-as-it -investigates-canvas-breach


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)