Instructure reported a data breach on April 30; ShinyHunters added Instructure to its victims list and claims it has 3.65TB of data from ~9K institutions (Ionut Arghire/SecurityWeek)

Instructure, a major educational technology platform serving approximately 9,000 institutions, suffered a significant data breach with threat actors claiming to have extracted 3.65TB of sensitive data. This breach exposes IT leaders to substantial compliance, reputational, and operational risks, particularly given the educational sector's handling of student records and institutional data subject to FERPA and other regulatory requirements. Organizations relying on Instructure must immediately assess their data exposure, review security postures with vendors, and prepare for potential regulatory inquiries and remediation costs.