:

INSTRUCTURE BREACH EXPOSES DATA FROM 8,800 SCHOOLS

AI DESK1 MIN READ
TUE, MAY 5, 2026

■ AI-SUMMARIZED FROM 1 SOURCE BELOW

A hacker claims to have stolen 280 million data records from nearly 8,800 educational institutions using Instructure's learning management platform. The breach affects students, staff, and administrators across colleges, school districts, and online education platforms.

Instructure, which operates Canvas—a widely-used learning management system—confirmed the security incident. The alleged theft represents one of the largest education sector breaches on record. The hacker has publicly disclosed the breach and claims access to student records, staff information, and institutional data. The scope spans institutions globally, though specific details about compromised data categories remain unclear. Instructure said it discovered unauthorized access and launched an investigation with cybersecurity experts. The company is notifying affected institutions and working to secure its systems. Educational institutions relying on Canvas serve millions of students worldwide. Breaches of this scale raise concerns about data protection standards in edtech infrastructure and potential identity theft risks for students and staff. Instructure has not disclosed the breach's technical cause or timeline. Affected schools are expected to announce notification procedures separately.

■ SOURCES

Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

End-of-life open source dependencies can harbor critical vulnerabilities that standard SCA tools fail to detect. HeroDevs has identified a significant gap in how CVE feeds monitor deprecated software.

2H AGOIndustry Desk

A previously undocumented Linux implant called Quasar Linux (QLNX) is actively targeting software developers with rootkit, backdoor, and credential-stealing capabilities.

3H AGODev Desk

Ireland's media watchdog is investigating Meta for allegedly restricting users' ability to control what content appears in their Instagram and Facebook feeds. The probe centers on whether the company is violating users' right to choose their feed experience.

4H AGOIndustry Desk

Kaspersky reports that Chinese-linked hackers compromised DAEMON Tools installers and delivered a backdoor to thousands of Windows users who downloaded the software from its official website starting April 8.

5H AGOSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.