Skip to content

Massive Instructure Data Breach Exposes 275 Million User Records Globally

Hackers stole 3.65TB of sensitive school data—including student IDs and private chats. How did Instructure respond, and what's next for cybersecurity in education?

The image shows a computer screen with a message that reads "This Hidden Site Has Been Seized" and...
The image shows a computer screen with a message that reads "This Hidden Site Has Been Seized" and a logo of the Dutch National Police. The logo is a shield with a blue background and a white star in the center. The text is written in a bold, black font and is surrounded by a white border.

Massive Instructure Data Breach Exposes 275 Million User Records Globally

Edtech company Instructure has suffered a major data breach affecting millions of users. The attack, claimed by hacking group ShinyHunters, exposed personal details from nearly 9,000 schools worldwide. Private messages, student records, and contact information were among the stolen data. The breach began on April 30, when Instructure reported a service disruption. The next day, the company confirmed a cybersecurity incident. By May 3, ShinyHunters announced responsibility and leaked 3.65 terabytes of stolen information.

The hackers claimed the data belonged to 275 million users across educational institutions globally. Compromised details included names, email addresses, student IDs, and billions of private messages exchanged between students and teachers. ShinyHunters also stated they had accessed Instructure’s Salesforce system. Instructure acted quickly, resolving the issues by May 2 and continuing to monitor its platforms. This breach follows a string of high-profile attacks by ShinyHunters in 2024, targeting companies like Rockstar Games, Crunchyroll, Bumble, ADT, and Panera Bread.

The stolen data contains sensitive user information from thousands of schools. Instructure has contained the breach but faces the challenge of securing its systems against further threats. The incident adds to a growing list of cyberattacks linked to ShinyHunters this year.

Read also:

Latest