ShinyHunters, a known data extortion group, claims to have breached Instructure, the company behind the Canvas learning management system used by universities and K-12 institutions worldwide. The group alleges exfiltration of data belonging to up to 275 million students and educators; Instructure has disclosed the breach, though the full scope of compromised data fields has not been confirmed. Organizations depending on Canvas face immediate regulatory exposure, reputational risk, and potential harm to student populations who cannot protect themselves.