US House Demands Instructure Testimony on Canvas Hacks
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- House Homeland Security Committee sent a letter to Instructure CEO Steve Daly demanding testimony on the Canvas breaches and coordination with CISA.
- Instructure confirmed that the same “ShinyHunters” group hacked its Canvas platform twice, stealing personal data of millions of students worldwide and defacing school login pages.
- Instructure said it reached an agreement with the hackers, who provided evidence that the stolen data was deleted, though the ransom amount remains undisclosed.
- Security experts warned that paying ransoms can fund future attacks and that hackers often retain data even after claiming deletion, casting doubt on Instructure's remediation claims.
Why it matters: Students and schools risk exposure of personal data, while Instructure faces congressional scrutiny that could force costly security upgrades, liability exposure, and tighter CISA oversight, potentially increasing costs for edtech users.
