Canvas is down as ShinyHunters threatens to leak schools’ data

Canvas, a widely-used educational learning management platform serving 9,000 schools and 275 million users, experienced a critical outage following a data breach by the ShinyHunters group that exposed sensitive student and staff information including names, emails, and ID numbers. The attackers have issued a ransom demand with a May 12 deadline, creating immediate business continuity and reputational risks for educational institutions while highlighting the inadequacy of the vendor's initial security response. This incident underscores the vulnerability of mission-critical EdTech infrastructure and the need for IT leaders to urgently reassess their vendor security standards, incident response protocols, and data protection strategies across their technology ecosystems.