On May 7, 2026, the educational technology company, Instructure, was hacked. Instructure owns Canvas, a platform used by schools across the world for education purposes, such as course grades and assignments. The cyberattack left millions of students unable to access the platform.
ShinyHunters, the group that claimed to be behind the breach, demanded that a ransom agreement be made, or else they would leak the stolen data, which included students’ emails and messages. According to Instructure, ShinyHunters was able to hack their software by exploiting a security breach through their Free for Teachers platform.
Luke Connolly, a threat analyst at cybersecurity firm Emsisoft, described ShinyHunters as a “a loose affiliation of teenagers and young adults based in the U.S. and the United Kingdom.”
Society has become almost totally reliant on technology to store vital information which means our online data is even more susceptible to cyberattacks.
ShinyHunters isn’t the only hacking group out there, but the group alone has been associated with a number of notable data breaches in recent years. Many platforms were used by students and younger generations in general, such as Wattpad, SoundCloud, and even Mathway, a platform students use to solve algebraic equations.
They haven’t only targeted educational or social platforms. In 2024, the website Ticketmaster and its parent company LiveNation were victims of a data breach by ShinyHunters, who claimed to have stolen the data such as the names and addresses of over 560 million customers. In recent years, ShinyHunters has also gained access to user information from companies such as AT&T Wireless, Google, and LVMH.
The breach at Canvas has raised concerns across the board about how safe our information really is online, especially from students affected by the hacking.
A Liberty University graduate student said it wasn’t just Canvas that was down for her school. “I was trying to sign up for classes, and I needed a form to fill out, so I went to look for the form, and it wasn't showing up.” She was concerned about being able to turn in the rest of her assignments on time. She said, “Honestly, at that point I was annoyed. I need to do my assignments, and I don't get any extensions." she said. Luckily, one professor was lenient. “Because of [Canvas] being down, one of my professors did put an extension on the assignment!”
"We're secure until all the technology goes down.” she added. “It's not security, it's a crutch, and I think you realize that when you don't have it."
A Lenoir-Rhyne University senior said he found out Canvas was down after attempting to check his grades. “I check Canvas a lot,” he said. “All my assignments and things were turned in already, and I was getting updates about grades in Outlook, but I could not check what the grades were.” He remarked on how much harm can come from even one cyberattack. "One hacking, one malware attack, can shut down thousands of schools,” he continued. “It's kind of ridiculous how that can happen."
When asked about how safe our information really is, he said, "It's not secure at all, it's very fragile, and I also think it just goes to show that putting all of our eggs in one basket is very dangerous.”