Instructure Reaches Agreement with Hackers After Two Canvas Breaches

Colleagues, a cybersecurity alert: Instructure announced an agreement with the ShinyHunters group after two Canvas breaches.

- Hackers claim they exfiltrated data on up to 275 million individuals and defaced login pages.
- The company obtained proof of data deletion and a pledge not to extort customers; financial terms undisclosed.
- Experts caution that payments do not ensure security — PowerSchool offers a warning example.
- Recommendation for administrators: review notifications, strengthen monitoring, and engage law enforcement.

Why this matters: protection of student data is a critical operational and reputational risk.

Have you received ransom demands or breach notifications?

#cybersecurity #dataprotection #education