The Lab · 2026-03-26 17:27:38 · GitHub Issues
Infinite Campus, a major U.S. K-12 student information system provider, has confirmed a data breach after the ShinyHunters extortion group threatened to leak stolen data. The company disclosed that the incident stemmed from the compromise of an employee's Salesforce account, which attackers used to access information. ...
The Lab · 2026-04-17 00:52:25 · The Register
A major ransomware group has listed textbook publishing giant McGraw Hill on its data leak site, claiming possession of 13.5 million records. The exposure stems from an alleged misconfiguration in a Salesforce-hosted environment, turning a standard corporate portal into an open-source intelligence goldmine for cybercri...
The Lab · 2026-05-10 07:01:48 · Mastodon:mastodon.social:#ransomware
A claim circulating across social media platforms alleges that Canvas, a widely used learning management system, was taken down by hackers with approximately 275 million user records stolen. The assertion has gained traction on platforms including Mastodon and Reddit, where users have shared the report alongside tags r...
The Lab · 2026-05-11 17:10:36 · BleepingComputer Echo RSS
Education technology firm Instructure has confirmed that malicious actors exploited a security flaw in its Canvas learning management system to modify login portals and plant an extortion message targeting institutions. The breach represents a direct attack on the infrastructure backbone of numerous educational organiz...
The Lab · 2026-05-11 18:18:24 · r/privacy
The hacking group ShinyHunters has given Instructure, parent company of the widely-used learning management system Canvas, until May 12 to pay ransom or face the release of 275 million student records. Tomorrow's deadline places immense pressure on the education technology company as it remains unclear whether any paym...
The Vault · 2026-05-12 16:18:23 · CyberScoop RSS
Instructure, the company behind the widely used Canvas learning management system, announced it reached an agreement with the cybercriminals who claimed responsibility for a breach affecting the platform's sensitive educational data. The company said the deal provided "all necessary assurances" regarding the stolen inf...
The Vault · 2026-05-12 17:18:21 · Browser The Record
Education technology giant Instructure has confirmed paying a ransom to the ShinyHunters cybercriminal group following a breach that exposed sensitive data from its Canvas learning management platform, used by thousands of schools across the United States. The company's decision to negotiate with the hackers came as Co...
The Lab · 2026-05-13 00:18:21 · TechCrunch
Instructure, the company behind the widely used Canvas learning management system, confirmed it has "reached an agreement" with threat actors who breached its systems twice, according to a company statement. The admission raises serious questions about the safety of data belonging to the millions of students, educators...