Canvas Hackers Warn 'Pay or Leak' as Ransom Deadline Looms Over 30 Million Students' Stolen Records

Source: International Business Times

Cybercrime group ShinyHunters has seized control of Canvas login pages at hundreds of universities, giving the platform's parent company until 12 May 2026 to pay up or risk seeing stolen data from tens of millions of students made public. Canvas, the cloud-based learning management system operated by education technology company Instructure, serves more than 30 million active users across more than 8,000 institutions globally. On 7 May 2026, students at universities including Harvard, Columbia, Princeton, Georgetown and the University of Pennsylvania opened their Canvas dashboards during finals week and found a ransom note in place of their coursework.