Millions of students' personal data stolen in major education breach
Original: Millions of students' personal data stolen in major education breach
Why This Matters
Major breach affects millions in education sector, highlighting vulnerability of student data systems
Instructure, company behind Canvas learning management system, confirmed cyber incident affecting its cloud environment. ShinyHunters ransomware group claims responsibility for stealing 275 million records from students, teachers, and staff across 8,809 educational institutions.
Instructure, the company operating the widely-used Canvas learning management system, experienced a significant data breach in its cloud-hosted environment. The ShinyHunters ransomware group claimed responsibility for the attack, stating they stole approximately 275 million records containing personal information of students, teachers, and staff. According to the criminals, the breach impacted 8,809 school districts, universities, and online education platforms using Canvas, with individual institution record counts ranging from tens of thousands to several million. The stolen data reportedly includes names, email addresses, student IDs, and course information. Security experts recommend affected families immediately change passwords for Canvas and related accounts, verify breach notifications directly through official school channels, and implement unique passwords across all educational platforms.