An unattributed hacking group disrupted Instructure’s Canvas learning management system on May 7, 2026, causing a multi-hour outage during academic finals and claiming exfiltration of approximately 275 million records. The breach scope and data types involved remain unverified by Instructure as of reporting. If substantiated, the scale of the alleged exfiltration represents significant risk to student and institutional data across hundreds of affected colleges and schools.