Hacker Claims 280 Million Records Stolen from Instructure Across 8,800 Schools

A threat actor claims to have stolen 280 million data records — covering students and staff — from 8,809 colleges, school districts, and online education platforms via Instructure, the company behind the Canvas learning management system. The claimed scope would make this one of the largest education-sector breaches on record. The technical method of access has not been disclosed and the claim has not yet been independently verified by Instructure. Affected institutions should monitor for phishing campaigns targeting students and staff using stolen data, and watch for official breach notifications from Instructure.