Schools Negotiate with Hackers Following Canvas Data Breach

ShinyHunters says it stole 6.65 TB of data from nearly 9,000 schools and universities using Canvas, and some institutions are now negotiating to stop the leak.

Instructure temporarily took parts of Canvas offline and said it found no evidence that passwords or financial data were stolen.

The attackers reportedly abused Canvas’s Free-for-Teacher environment, which Instructure later disabled after login-page disruption.

The breach could expose sensitive student and staff information across thousands of schools and is disrupting operations during a critical academic period.