As discussed in our previous article, on May 7, 2026, Instructure experienced a significant data breach affecting Canvas, an online education management platform utilized by over 8,000 schools and universities across the country. ShinyHunters, a criminal hacking group, claimed responsibility for the attack and posted a ransom note with a deadline of May 12, 2026, for Instructure to negotiate a settlement. On May 11, 2026, Instructure publicly confirmed that it reached an agreement with ShinyHunters to pay an undisclosed ransom. The agreement allegedly covers all affected Instructure customers, eliminating the need for them to individually engage with the hackers. According to Instructure’s statement, as a result of the negotiation:
