Rockstar ransom hackers claim to have stolen the data of 280 million teachers, school staff, and students in Canvas attack
Instructure’s Canvas learning management system has experienced a significant data breach, with ransomware group ShinyHunters claiming responsibility for the attack. The group alleges it exfiltrated data belonging to approximately 280 million teachers, school staff, and students across 8,809 educational institutions worldwide.
The stolen data, comprising hundreds of gigabytes, includes sensitive information such as names, email addresses, and private messages sent through the platform. Instructure disclosed the cybersecurity incident on May 1, marking one of the largest breaches in the education sector.
The exposure poses serious privacy risks for affected individuals, including potential identity theft and targeted phishing attacks. Users are advised to enable two-factor authentication and monitor their accounts for suspicious activity. The incident underscores the critical need for robust cybersecurity measures in educational infrastructure and the ongoing vulnerability of widely-used platforms to sophisticated cyber attacks.