Instructure data breach: ShinyHunters says it stole data and private messages from 275 million teachers and students
Instructure, a major educational tech company, confirmed a cybersecurity incident after ShinyHunters claimed to have stolen 3.65 terabytes of data from its systems, including private messages and user information associated with 275 million users. The stolen data includes names, email addresses, student IDs, and private messages exchanged on the platform.
Instructure, the company behind the Learning Management System Canvas, announced a service disruption on April 30. The next day, it confirmed a cybersecurity incident perpetrated by a criminal threat actor. ShinyHunters claimed responsibility and uploaded 3.65 terabytes of stolen data to its website on May 3. The stolen data includes users' names, email addresses, student IDs, and private messages. According to ShinyHunters, the data is associated with 275 million users at nearly 9,000 schools worldwide. Instructure patched its security system, revoked certain credentials and access tokens, and rotated API keys.
This content was automatically generated and/or translated by AI. It may contain inaccuracies. Please refer to the original sources for verification.