shinyhunters
Instructure paid ShinyHunters on May 11 to delete 3.65TB from 8,809 schools. Congress opened an investigation the same day. The vendor-paid-ransom precedent for SaaS is now set.
shinyhunters
ShinyHunters defaced Canvas login pages worldwide on May 7 — disrupting finals week at Harvard, Penn, Duke, and Virginia Tech. The group claims 275 million records from 9,000 schools and is now telling individual schools to negotiate ransom payments by May 12. Instructure had declared the May 1 incident contained
Cyber Attacks
Instructure says its forensics team believes the latest attack is contained — but won't yet say what's been touched.
Data Breaches
Same group behind ADT 10M breach claims 1.4M Udemy users via SaaS vishing. Education sector PII and corporate data at risk. April 27 leak deadline looms. SAN FRANCISCO, CA — Less than a week after the ADT data breach exposed 10 million records, the notorious threat collective ShinyHunters has claimed
Data Breaches
The Los Angeles County Office of Education (LACOE) has launched a forensic investigation into potential unauthorized access to its tax document portal after fraudulent tax returns were reportedly filed in the names of school district employees. DOWNEY, CA — The Los Angeles County Office of Education (LACOE) is investigating a potential
Data Breaches
The education publishing giant is the latest victim of a widespread cloud configuration issue, with reports suggesting up to 13.5 million accounts may be impacted by an extortion-linked breach. NEW YORK, NY — McGraw Hill, one of the world’s "Big Three" educational publishers, has confirmed a significant
Data Breaches
Educational services provider Kaplan North America, LLC has begun notifying an undisclosed number of individuals following a cybersecurity incident that exposed sensitive personal information. The breach, which was identified in early March 2026, has already triggered multiple class-action investigations and legal filings across several jurisdictions. Incident Discovery and Data Exposure