Archive — US — techcrunch
Hackers steal students’ data during breach at education tech giant Instructure
Instructure, an education tech company, confirmed a data breach involving the theft of students' private information by the hacking group ShinyHunters. The stolen data includes students' names, email addresses, and communications. The breach potentially affects up to 9,000 schools globally, impacting around 275 million individuals. Instructure has resumed some services following the incident.
Key points
- Instructure confirmed a data breach involving students' private information.
- ShinyHunters hacking group claimed responsibility for the breach.
- Stolen data includes students' names, personal email addresses, and messages between teachers and students.
- Anonymized samples from two U.S. schools confirmed the types of data stolen, but no passwords were compromised.
- ShinyHunters claimed around 9,000 schools and 275 million individuals were affected.
- Instructure has restored some of its services, like Canvas, after maintenance.
Why it matters
- This incident reflects a rising trend in cyber attacks on educational institutions, especially due to increased reliance on digital platforms.
- The frequency and scale of data breaches are growing, aligning with 2025 IT Trends emphasizing the need for more robust cybersecurity measures.
- Concerns about data privacy are heightened as educational and cloud tech companies become prime targets for financial hackers.
The Instructure breach highlights the significant vulnerabilities in the education sector's cybersecurity, underscoring the urgent need for institutions to enhance their data protection frameworks amid a rising tide of cybercrime.