ShinyHunters’ Instructure Canvas LMS and Vimeo Breaches Impact Millions of Users

https://hackread.com/wp-content/uploads/2026/05/shinyhunters-hackers-instructure-canvas-vimeo-data-breaches-1024x576.png

The infamous hacking group ShinyHunters has targeted two major technology firms, putting the personal details of millions of students and professionals at risk.

The breaches hit Instructure, the US-based parent company behind the popular Canvas learning platform, and the video-hosting site Vimeo.

Hackread.com has obtained the full list of affected institutions impacted by the Instructure data breach, and it is massive, indicating the vast scale of the theft and impacting around 15,000 institutions across the UK, Europe, and the US.

Millions of Student Records Stolen from Canvas

The attack on Instructure began on 30 April 2026. The company confirmed on 1 May that hackers exploited a vulnerability to gain access, forcing the company to shut down parts of its service, including Canvas Data 2 and Canvas Beta. This, in turn, caused problems for schools’ third-party integrations and external apps that rely on API keys (digital connectors) to function.

“While we...

Copyright of this story solely belongs to hackread.com. To see the full text click HERE

Read more

https://assets.bwbx.io/images/users/iqjWHBFdfxIU/iMCFVYC_pczw/v0/1200x800.jpg

How AI is shaping the 2026 US midterms, as public anger grows against data center expansion and the AI industry emerges as one of the biggest financial backers

Sponsor Posts Fast, affordable law for startups — Soxton automates startup legal so founders can move faster and sleep better. We handle incorporation, advisor, employment and commercial contracts. Join the waitlist for early access! Stop vibe coding analytics — Equals AI turns questions about your business into auditable spreadsheet models and dashboards.