highclosedpartial fix
Instructure Canvas Free-for-Teacher breach (ShinyHunters)
› Instructure Canvas (Free-for-Teacher)
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- May 1, 2026
- closed
- May 31, 2026
- CVEs
- none
- sources
- 1
## summary
In May 2026 Instructure confirmed a security incident involving Canvas Free-for-Teacher after ShinyHunters claimed theft of data tied to hundreds of millions of users. Exposed data included names, emails, student IDs and some private messages; Instructure said it had no evidence passwords or financial/government IDs were taken.
severity: Large data breach / extortion
## affected
- n/a
## fixed in
no fixed release yet
## news & write-ups[1]
## notes & caveats
Verify primary vendor advisory for exact fixed versions; facts taken from public sources listed in links.
