Instructure Holdings, Inc. (Canva LMS, instructure.com)
bd_b4ac7a07388609b0 · schema v1 · pii pii-v1
Full breach record for Instructure Holdings, Inc. (Canva LMS, instructure.com) →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Shinyhunters on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Instructure Inc. is a technology company that developed the Canvas Learning Management System (LMS). Founded in 2008, Canvas is used by educators and students worldwide to connect and integrate digital learning resources into a school's curriculum. Upgraded features include assessment and reporting tools, plus customizable apps. They also offer Bridge, an employee development and engagement software for businesses.
Source provenance
- Source URL
- https://www.ransomware.live/id/SW5zdHJ1Y3R1cmUuY29tIC0gQ2FudmFzQHNoaW55aHVudGVycw==
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- a421c6afad33c29a35fdb418ab50532fa9ce29f50509b0f6955cf2b314c3b992
Reporting entity
- Name
- shinyhunters
Victim entity
- Name
- Instructure Holdings, Inc. (Canva LMS, instructure.com)norm: instructure holdings inc canva lms instructurecom
- Domain
- instructure.com
- Industry
- Educationllm
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Discovered
- Oct 3, 2025
- Attack vector
- Ransomware· shinyhunters
- Threat actor
- ShinyhuntersExternalFinancial
Compliance
- Time to disclose
- 30 weeks(209 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.