Instructure under pressure again: attackers defaced Canvas login pages and demand ransom

Colleagues, a cybersecurity alert: Instructure reports student data theft, and the ShinyHunters group has again defaced Canvas login pages at several schools.

Key points:
- Attackers claim to have stolen names, personal email addresses, and messages between teachers and students.
- The defaced pages state the data will be published on May 12 unless an “agreement” is reached.
- Instructure is partially accessible; the attack vector and scope of compromise are under investigation.

Why it matters: the incident jeopardizes student privacy and the availability of educational services.

What priority steps do you recommend to protect educational platforms?

#cybersecurity #edtech #databreach #infosecurity