ShinyHunters Extortion Gang Breaches Instructure's Canvas Learning Management System
Security
The ShinyHunters extortion gang breached education technology provider Instructure and exploited a vulnerability to deface Canvas login portals for hundreds of colleges and universities. The attack targeted Instructure’s Canvas learning management system, impacting multiple higher education institutions. No specific vulnerability identifier (e.g., CVE ID), date of the breach, or exact number of affected entities was disclosed. The incident marks another compromise of Instructure by ShinyHunters, focusing on extortion through portal defacement. The full scope of data exposure or operational disruption remains unconfirmed in the reported details.