Instructure Reaches Deal with ShinyHunters to Prevent Canvas Data Leak

Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak.

The company behind the Canvas learning platform, Instructure, has reached an agreement with ShinyHunters, who stole 275 million student records this month. The hackers originally threatened to leak the private information of students and teachers unless they were paid by a deadline of 12 May 2026.

The New Agreement

Instructure shared the news on its website in an update dated 11 May 2026. The company revealed that it reached an agreement with the hackers to prevent them from leaking the stolen data, confirming that the stolen data was returned with digital proof of the hackers destroying their copies. This proof is called shred logs, which are technical documents that show files have been permanently deleted.

Instructure says schools and universities don’t need to communicate ...