THREATNOIR
Subscribe
Back to Feed
BreachesMay 7, 2026

‼️ Users of Instructure are currently logging into Canvas with a ShinyHunters message. Ruthless....

Instructure Canvas users see ShinyHunters message during login, indicating potential breach.

Read at source
Vendor Watch

Run Instructure?

Get an email when a reviewed story names Instructure, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works

Summary

Users of Instructure's Canvas learning management platform are reportedly encountering a ShinyHunters-attributed message during the login process. ShinyHunters is a known threat actor group associated with data breaches and extortion campaigns. This suggests either a compromise of Canvas infrastructure or hijacking of user sessions.

Entities

Canvas (product)Instructure (vendor)ShinyHunters (threat_actor)