ShinyHunters Breach Forces Canvas Platform Offline, Disrupting Schools Nationwide
Instructure has disabled its Canvas learning management system after the ShinyHunters threat actor executed a data extortion attack. The outage is affecting thousands of schools, colleges, and universities across the United States that rely on Canvas as their primary educational platform. ShinyHunters is a well-documented group known for large-scale credential theft and extortion campaigns targeting high-value platforms.
Why It Matters
Canvas is among the most widely deployed edtech platforms in the US. A forced takedown by data extortion — rather than a patch-and-continue response — signals a serious breach. Affected institutions face immediate disruption to coursework, assignments, and communications during the academic calendar.