Back to Feed
BreachesMay 7, 2026

‼️ Users of Instructure are currently logging into Canvas with a ShinyHunters message. Ruthless....

Instructure Canvas users see ShinyHunters message during login, indicating potential breach.

Summary

Users of Instructure's Canvas learning management platform are reportedly encountering a ShinyHunters-attributed message during the login process. ShinyHunters is a known threat actor group associated with data breaches and extortion campaigns. This suggests either a compromise of Canvas infrastructure or hijacking of user sessions.

Entities

Canvas (product)Instructure (vendor)ShinyHunters (threat_actor)