Every public data breach

44 disclosed this week · 26,355 on record

Instructure

Disclosed May 2, 2026Unverified

Instructure Canvas breach exposes students' messages at nearly 9,000 schools

Edtech firm Instructure confirmed attackers exploited a platform flaw in its Canvas LMS and took names, emails, student IDs and messages between users; ShinyHunters claimed data on about 275 million people at nearly 9,000 schools and later defaced login pages in a second breach. Instructure said it reached an agreement with the group to delete the data, and a House committee sought testimony.

What is known

People affectedNot stated in the sources we have
DisclosedMay 2, 2026
DiscoveredApr 29, 2026
AttackExtortion
Data exposedNamesEmailsMessagesChildren's dataEducation records
SectorEducation · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Instructure