Instructure / Canvas LMS 275 Million Affected — May 2026
ShinyHunters claimed 3.65 TB of data from Instructure's Canvas LMS, impacting ~275 million students, teachers, and staff across more than 9,000 institutions. Full-dump warning issued May 3, 2026.
- Student/teacher emails
- Profile data
- Private messages
- Salesforce-integration metadata
- 3.65 TB total
ShinyHunters claimed 3.65 TB of data from Instructure's Canvas Learning Management System, impacting approximately 275 million students, teachers, and staff across more than 9,000 institutions worldwide. Exposed data includes private messages, emails, profile metadata, and Salesforce-integration records. The original disruption began April 30, 2026; the threat actors issued a full-dump warning on May 3.
Canvas is one of the most widely used LMS platforms in higher education and K-12. The breadth of this dataset — combined with private-message content — represents one of the largest education-sector exposures on record. For campus content creators, university esports team members, and student streamers, the cross-section of educational records and gaming/streaming personas is now a meaningful doxxing risk vector.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary DoxxScan™ to see if their identity is exposed in the breaches we cover.
Were you affected by this breach?
See exactly what an attacker can piece together from your email, username, or handle. Free first scan, no credit card.
Try DoxxScan — 72hr free trial →
