The Canvas Breach: What Comes Next

The Canvas Breach banner

B-CLE Recording (No CLE) | Youtube Recording | Summary | Speaker Bio(s) & Contact Info | Transcript 

Resources:
FBI PSA – ShinyHunters Cyber Attack | ShinyHunters Phishing Email Example

In May 2026, the cybercriminal group Shiny Hunters breached Instructure’s Canvas learning management system—used by roughly 40% of U.S. schools—exfiltrating approximately 275 million records across 8,800 institutions. The single most critical takeaway: Instructure’s ransom payment and “shred logs” provide no reliable assurance that the data will not be weaponized against individual students, faculty, and minors.

Speaker(s):
Bryan Vorndran, Deputy CISO, Microsoft (former head, FBI Cyber Division)
Miriam Wugmeister, Partner and Privacy & Cybersecurity Practice Leader, Morrison & Foerster