ShinyHunters Breaches Instructure Canvas Schools

The ShinyHunters threat group claims to have stolen data tied to roughly 9,000 schools using Instructure's Canvas learning management platform. If verified, students, teachers, and administrators across those institutions could have personal information exposed and reused in phishing or credential-stuffing attacks. Schools using Canvas should monitor for official notifications, rotate admin credentials, enable MFA, and warn users about targeted phishing.