{"id":264175,"date":"2026-05-09T00:28:08","date_gmt":"2026-05-09T00:28:08","guid":{"rendered":"https:\/\/www.newsbeep.com\/us-fl\/264175\/"},"modified":"2026-05-09T00:28:08","modified_gmt":"2026-05-09T00:28:08","slug":"canvas-ums-learning-platform-hacked","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us-fl\/264175\/","title":{"rendered":"Canvas, UM\u2019s learning platform, hacked"},"content":{"rendered":"

\"\"<\/a>Image of Canvas and the IT alert on the evening of Friday, May 8, 2026. \/\/ Photo via Katie Karlson.<\/p>\n

Canvas, a learning management system managed by Instructure and used by the University of Miami, went offline on Thursday, May 7, following a data breach.<\/p>\n

UM has been transitioning from Blackboard Learn to Canvas<\/a> \u2014 which already hosts more than 8,000 academic institutions<\/a> \u2014 since fall 2025.\u00a0<\/p>\n

Instructure announced<\/a> on May 1 that it had detected \u201cunauthorized activity in Canvas\u201d on April 29 and started an investigation.\u00a0<\/p>\n

An update the following day disclosed that the information stolen included personal data like names, email addresses, student ID numbers and messages between Canvas users. Instructure \u201cidentified additional unauthorized activity tied to the same incident\u201d on May 7.\u00a0<\/p>\n

So far, there is no evidence that financial information, passwords or government identifiers were involved in the data breach.\u00a0<\/p>\n

\u201cInstructure.com is still working on its investigation of the recent unauthorized activity across its systems,\u201d said the University in a statement to The Hurricane. \u201cYou can follow the latest updates from Instructure.com on the \u2018Security Incident Update & FAQs\u2019 site<\/a>.\u2019\u201d\u00a0<\/p>\n

At the time of publication, the University has not clarified whether UM students or faculty were impacted by the hack.\u00a0\u00a0<\/p>\n

On Thursday, a group called ShinyHunters took credit for the hack. Students who tried to log onto the platform found a messag<\/a>e from the group instead of the Canvas page.\u00a0\u00a0<\/p>\n

A threat analyst at Emsisoft security firm<\/a> described ShinyHunters as a \u201cloosely affiliated\u201d group of teens and young adults based in the U.S. and the United Kingdom.\u00a0<\/p>\n

According to The New York Times<\/a>, the note read that ShinyHunters had breached Instructure \u201cagain\u201d after the company \u201cignored [them] and did some \u2018security patches.\u2019\u201d\u00a0<\/p>\n

The group said they stole data from nearly 9,000 schools and 275 million people, according to a ransom note shared on May 3 by Ransomeware.live<\/a> \u2014 a site that monitors ransomware group leak sites.\u00a0<\/p>\n

The hackers gave Instructure a deadline of May 6 to contact them before they leaked the data \u201calong with several annoying (digital) problems that\u2019ll come your way.\u201d<\/p>\n

\u201cPay or Leak,\u201d the note read. \u201cMake the right decision, don\u2019t be the next headline.\u201d<\/p>\n

ShinyHunters has also taken credit for numerous other high-profile hacks, including trying to sell Ticketmaster data on the dark web<\/a> in 2024 and stealing more than one million of Harvard\u2019s records in February<\/a>.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"Image of Canvas and the IT alert on the evening of Friday, May 8, 2026. \/\/ Photo via…\n","protected":false},"author":2,"featured_media":264176,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[123,125,124],"class_list":["post-264175","post","type-post","status-publish","format-standard","has-post-thumbnail","category-miami","tag-miami","tag-miami-headlines","tag-miami-news"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-fl\/wp-json\/wp\/v2\/posts\/264175","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-fl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-fl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-fl\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-fl\/wp-json\/wp\/v2\/comments?post=264175"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-fl\/wp-json\/wp\/v2\/posts\/264175\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-fl\/wp-json\/wp\/v2\/media\/264176"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-fl\/wp-json\/wp\/v2\/media?parent=264175"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-fl\/wp-json\/wp\/v2\/categories?post=264175"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-fl\/wp-json\/wp\/v2\/tags?post=264175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}