HIGHRansomware
Global

Canvas E-Learning Platform Breached by Cybercriminals

·Source: Bank Info Security

Updated:

Executive Summary

Ransomware Group ShinyHunters' Victims: Schools, Universities, Ambulance Service The Canvas learning management system with over 30 million active K-12 and higher-education student and teacher users worldwide has been br

Analysis

Ransomware Group ShinyHunters' Victims: Schools, Universities, Ambulance Service The Canvas learning management system with over 30 million active K-12 and higher-education student and teacher users worldwide has been breached by attackers, leading to operator Instructure temporarily taking the service offline. Cue homework and exam scheduling chaos.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/canvas-e-learning-platform-breached-by-cybercriminals-image_small-6-a-31639.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on May 8, 2026.

Related Threats

MEDIUMVulnerability

Weekly Update 503

Well, it's the day before the Instructure "pay or leak" deadline (at least by my Aussie watch), and the company remains removed from the ShinyHunters website. In its place sits a press statement that amounts to "we're not making any statements". So

Troy Hunt
MEDIUMVulnerability

ShinyHunters Claims Second Attack Against Instructure

The edtech company is struggling to wrest control from its hackers. PII belonging to hundreds of millions of people is on the line.

Dark Reading
HIGHData Breach

ShinyHunters claims nearly 9,000 schools affected by Canvas data breach

The group that stole data from Instructure users claims that it will release the data of students from nearly 9,000 education institutions around the country. The post ShinyHunters claims nearly 9,000 schools affected by Canvas data breach appeared first on CyberScoop .

CyberScoop