You are connecting from Lake Geneva Public Library, please login or register to take advantage of your institution's Ground News Plan.
Published 3 days ago • loading... • Updated 3 days ago
Canvas Hack Impacting New York, New Jersey Schools, Universities Amid Finals Season
Hacking collective ShinyHunters breaches Instructure again, stealing data from 275 million users, defacing login pages and demanding a settlement.
On Thursday, May 7, hacking group ShinyHunters breached Instructure's Canvas system, disrupting final exams for thousands of students globally. The platform, used by schools to manage grades and course materials, faced widespread login disruptions.
This incident marks a second breach of Instructure this month, following an earlier intrusion confirmed by the company. ShinyHunters has previously claimed responsibility for breaches at Panera Bread, Crunchyroll, and Bumble over the past year.
Hackers exploited an issue in 'Free-For-Teacher' accounts to compromise login pages, threatening to leak student names, emails, and ID numbers. The breach potentially impacts 275 million users across 8,809 schools worldwide, including every Ivy League university.
Universities like UW-Madison are rescheduling exams to accommodate the outage, with some pushing grade submission deadlines to May 14. Instructure temporarily disabled affected accounts to contain the security incident.
ShinyHunters demanded a settlement by May 12, threatening to expose stolen data if terms remain unmet. Instructure is working with law enforcement and NYC Cyber Command to "drive towards resolution and safeguards as soon as feasible.
Anderson Cooper 360 discusses ShinyHunters’ breach of Instructure’s Canvas, ransom notes on school login pages, and the threat to leak data from 275 million users during finals week.