2
Published signals
currently linked to this company
Company intelligence
Instructure cybersecurity incidents and threat signals
instructure.com
This company page brings together public reporting currently associated with Instructure. It reflects signals published by Shadow Tier and should not be read as a complete incident history.
Company links
0
Last 28 days
recent published signals
0
Last 90 days
recent published signals
2
High or critical
confidence classifications
July 3, 2026
Latest report
most recent published signal
Company signals
All published signals involving Instructure
Instructure (Canvas) Confirms Data Breach, ShinyHunters Claims 275 Million Records
Instructure, the company behind the Canvas learning platform, confirmed a data breach on May 1, 2026, following a security incident detected on April 29, 2026. The criminal threat actor ShinyHunters claimed responsibility, alleging the theft of 3.65 terabytes of data from approximately 275 million users across nearly 9,000 educational institutions. The compromised information includes names, email addresses, student ID numbers, and messages among users. Instructure stated that passwords, dates of birth, government identifiers, or financial information were not involved.
Instructure's Canvas LMS Suffers Data Breach, ShinyHunters Claims Responsibility
On April 25, 2026, unauthorized actors accessed Canvas systems, a learning management system operated by Instructure. The intrusion was detected four days later. The ShinyHunters hacking group claimed responsibility, stating they stole 3.65 terabytes of data from approximately 275 million users, including names, email addresses, student ID numbers, and private messages.
FAQ
Questions about Instructure cybersecurity reporting
What does the Instructure page include?
It combines a reviewed organization profile with all current published Shadow Tier signals explicitly linked to Instructure.
Does every mention of Instructure appear here?
No. A signal must contain a reliable company connection and meet the publication criteria; incidental or ambiguous mentions are excluded.
Why can the incident count change?
The page follows current published reporting. Counts change as new evidence is added, classifications are reviewed, or older signals leave the reporting window.