ShinyHunters claims Instructure breach, data from 275M users stolen

Instructure confirmed a breach exposed names, email addresses, student ID numbers, and user messages from its Canvas platform.

ShinyHunters claimed it stole data on 275 million people and accessed Instructure’s Salesforce environment.

Instructure said it patched affected systems, increased monitoring, and rotated application keys while the investigation continues.

The incident raises concerns about large-scale exposure of student and school data and ongoing extortion attacks on edtech firms.