Canvas returns online after ransomware-linked outage exposed student data and ShinyHunters threatened school data leaks

Instructure says Canvas is back online for most users after it took the learning platform offline to contain an ongoing security incident. Students saw a ransom message claiming to be from ShinyHunters, which said it breached Instructure and threatened to leak data from affected schools by May 12.

The incident highlights how education platforms have become high-value targets because they centralize student identities, communications, and institutional workflows. A public ransom message inside a widely used LMS raises pressure on schools and vendors to improve incident response and third-party risk planning.

Canvas (Instructure) LMS Down in Ongoing Ransomware Attack