Back to article
Scott Helme

The Instructure Canvas Breach (2026): How XSS in a Support Ticket Compromised 275 Million Students (opens in new tab)

Covers 4 stories See all stories this covers including [Canvas] Security Incident Update and FAQsDiscussed on Hacker News

Covers 4 related stories

instructure.com·

[Canvas] Security Incident Update and FAQs

Discussed on Hacker News and Hacker News
Feeds
BleepingComputer·

Instructure confirms hackers used Canvas flaw to deface portals

Feeds
BleepingComputer·

Instructure reaches 'agreement' with ShinyHunters to stop data leak

Feeds
Malwarebytes·

ShinyHunters escalates Canvas attacks with school login defacements

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help