Rockstar ransom hackers claim to have stolen the data of 280 million teachers, school staff, and students in Canvas attack

Instructure, the company behind cloud-based learning management system Canvas, has suffered a massive data breach. Ransomware group ShinyHunters has since claimed responsibility for the attack, alleging that it has exfiltrated data tied to 280 million teachers, school staff, and students.

The data breach totals hundreds of gigabytes, potentially exposing Canvas users' names, email addresses, and their private messages.

Instructure first disclosed on May 1 that it "experienced a cybersecurity incident perpetrated by a criminal threat actor." The Canvas instances of 8,809 universities, schools, and other educational platforms were affected by the cyberattack. ShinyHunters shared alleged record counts with Bleeping Computer, which said they "range from tens of thousands to several million per institution."

Bleep...