
Cybercrime group ShinyHunters has seized control of Canvas login pages at hundreds of universities, giving the platform's parent company until 12 May 2026 to pay up or risk seeing stolen data from tens of millions of students made public.
Canvas, the cloud-based learning management system operated by education technology company Instructure, serves more than 30 million active users across more than 8,000 institutions globally.