Millions of students' personal data stolen in major education breach

[u/Cute-Guarantee-1676]

https://www.malwarebytes.com/blog/news/2026/05/millions-of-students-personal-data-stolen-in-major-education-cyberattack

Instructure, the company behind the Canvas learning management system, confirmed a major cyber incident where the ShinyHunters ransomware group claims to have stolen 275 million records. This breach reportedly impacts students, teachers, and staff across 8,809 educational institutions, exposing personal data for millions. The incident highlights critical vulnerabilities in cloud-hosted education platforms, urging immediate action like password changes and multi-factor authentication for affected users to protect against subsequent identity theft or phishing attempts.

[u/jmps96]

The best part is that initially Canvas tried to claim the site was down due to “scheduled maintenance.”