ShinyHunters Targets Instructure Again with Canvas Portal Defacements

Education technology company Instructure is facing a second apparent security incident after hackers defaced multiple school login pages connected to its Canvas learning platform. The cybercrime group ShinyHunters claimed responsibility by injecting messages into compromised portals, threatening to publish stolen data unless a settlement is reached. The development follows Instructure’s recent disclosure of a breach involving student and teacher information, including names, email addresses, and private messages. The incidents raise concerns about the ongoing security of widely used educational platforms and the potential exposure of sensitive student data.

Reference: cybersecurityventures.com