Violazioni · 140 giorni fa
Il vero rischio non è la breach di una singola scuola. È che Canvas si trovi nel mezzo dell’identità e della comunicazione degli studenti tra molte istituzioni, quindi i dati detenuti dal vendor possono essere riutilizzati per colpire persone che non hanno mai perso i propri sistemi locali.
12 fonti che coprono questa storia
Smashing Security podcast #467: How ShinyHunters hacked the world’s biggest universities
Welcome to the largest educational data breach in history – affecting nearly 9,000 institutions, every Ivy League university, and 30 million students mid-finals.
Canvas Maker Instructure Reaches Agreement With Cybercriminals
Instructure says it reached an agreement with ShinyHunters over the Canvas breach data
Canvas owner reaches ‘agreement’ with threat actors after data breach
Cybersecurity experts suggest that Instructure appears to have made a ransomware payment, which the FBI highly discourages.
US govt seeks Instructure testimony on massive Canvas cyberattack
House Committee on Homeland Security is calling on Instructure executives to testify about two cyberattacks by the ShinyHunters extortion group that targeted the company's Canvas platform, allowing threat actors to steal student data and disrupt schools during final exams.
Instructure took a risky approach to recover stolen Canvas data - Help Net Security
Instructure confirmed an agreement with ShinyHunters following a breach of the Canvas LMS that exposed data tied to millions of users.
Instructure strikes deal with hackers who breached it twice | TechCrunch
The maker of the Canvas school software said it "reached an agreement" with the hackers, but provided no guarantees that the hackers would not release the data or keep their word.
Deal Reached With Hackers to Delete Data Stolen From the Canvas Educational Platform
The company that operates online learning system Canvas said it struck a deal with hackers to delete the data they pilfered in a cyberattack that created chaos for students, many of them in the middle of finals.
The Record from Recorded Future
Instructure pays ransom after Canvas incident as Congress announces investigation
The company said its agreement with the hackers involved their data being “returned” to them and digital confirmation of data destruction.
Instructure reaches 'agreement' with ShinyHunters to stop data leak
Instructure, the edtech giant behind the widely popular Canvas learning management system (LMS), has reached an "agreement" with the ShinyHunters extortion group to prevent the data stolen in a recent breach from being leaked online.
Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak
Instructure paid a ransom after hackers stole 275 million Canvas records, reducing risks of wider extortion and leaks.
ShinyHunters Escalates Canvas Extortion
ShinyHunters has escalated its Canvas extortion campaign, defacing hundreds of school login pages and threatening to leak stolen data
ShinyHunters Claims Second Attack Against Instructure
The edtech company is struggling to wrestle control from its hackers. PII belonging to hundreds of millions of people is on the line.
Part of the PlainSec briefing for 2026-05-05