Hackread – Cybersecurity News, Data Breaches, AI and More
Actively Exploited
The ShinyHunters hacking group has defaced the Canvas LMS portal, which is widely used by universities for online learning. This breach has disrupted access for hundreds of universities around the globe, impacting students and faculty who rely on the platform for their education. Instructure, the company behind Canvas, confirmed the breach and is currently working to restore services. This incident raises concerns about the security of educational platforms, especially as online learning continues to be a primary method of instruction. The attack highlights the ongoing risks that educational institutions face from cybercriminals.
Instructure, the company behind the popular Canvas learning management system used by many educational institutions, suffered a significant breach attributed to the hacker group ShinyHunters. This incident raises serious concerns about how much trust schools place in their vendors' security practices. The attack not only compromises sensitive information but also highlights the vulnerability of educational institutions that rely heavily on third-party services. As these platforms become integral to online learning, the implications of such breaches can affect students, educators, and administrative operations alike. Schools may need to reassess their vendor relationships and security protocols to better protect their data in the future.
Hackread – Cybersecurity News, Data Breaches, AI and More
Actively Exploited
ShinyHunters, a known hacking group, has breached both Instructure and Vimeo, leading to the exposure of millions of records belonging to students and users. The attacks utilized both direct methods and supply chain vulnerabilities, raising serious concerns about the security of educational and video platform data. Millions of individuals may have had their personal information compromised, which can lead to identity theft and other malicious activities. This incident underscores the need for organizations to enhance their security measures, particularly in protecting sensitive user information. As the investigation unfolds, affected users are advised to monitor their accounts closely for any suspicious activity.
A hacker claims to have stolen around 280 million data records from 8,809 educational institutions, including colleges, school districts, and online platforms, in a breach involving Instructure, a prominent education technology company. The records reportedly contain sensitive information about students and staff, raising concerns over identity theft and privacy violations. This incident highlights the vulnerabilities in educational systems, which often store vast amounts of personal data. Users and institutions need to be vigilant about potential phishing attacks and other exploits that could arise from this breach. The impact on students and staff could be severe, as their personal information may be used maliciously.
The article discusses various cybersecurity topics, including the recent activities of hackers targeting mental health organizations. These attackers are exploiting vulnerabilities in systems that handle sensitive patient information, which raises significant privacy concerns. Additionally, the piece touches on the use of OAuth vulnerabilities and highlights a three-day period where key vulnerabilities were identified and reported. The mention of AI suggests that attackers may be using advanced techniques to enhance their operations. As these threats evolve, organizations in the healthcare sector need to bolster their security measures to protect sensitive data and maintain trust with their clients.
In April 2026, Vimeo confirmed that hackers accessed the personal data of 119,000 users through a breach involving a third-party vendor, Anodot. The ShinyHunters group, known for targeting various companies, exploited this vulnerability to steal sensitive information. This incident raises concerns about the security of third-party services that companies rely on, as they can serve as weak links in the overall security chain. Users affected by this breach should be vigilant about their personal information and consider changing their passwords, especially if they use the same credentials across multiple platforms. The breach serves as a reminder for companies to evaluate their partnerships and ensure that vendors adhere to strict security protocols.
In April, the Vimeo platform was hacked by the ShinyHunters extortion gang, leading to the theft of personal information from more than 119,000 users. The breach was confirmed by data breach notification service Have I Been Pwned, which monitors and reports on such incidents. Those affected may have had their names, email addresses, and other personal details compromised. This incident raises concerns about the security measures in place at Vimeo and the potential for further exploitation of the stolen data. Users are advised to monitor their accounts for any suspicious activity and consider changing their passwords to enhance security.
Hackread – Cybersecurity News, Data Breaches, AI and More
A website called GTFO ICE, which opposes U.S. Immigration and Customs Enforcement (ICE), is facing accusations of inadvertently exposing the personal information of over 17,000 activists. This incident reportedly involves the leaking of names, addresses, and other sensitive details, raising fears that this data could be accessed by government agencies. This situation is particularly concerning as it could put those activists at risk, especially in a politically charged environment. The exposure of such information not only violates privacy but also undermines the safety of individuals involved in advocacy against immigration enforcement. The incident serves as a stark reminder of the vulnerabilities that can exist even in platforms advocating for social justice.
Trellix, a security vendor, has reported a breach that resulted in unauthorized access to its source code. The breach raises concerns about the potential for further exploitation of the accessed code, which could lead to vulnerabilities in the company's products or services. While the specifics of what data was accessed remain unclear, such incidents can undermine customer trust and affect the overall security posture of companies relying on Trellix’s solutions. This incident serves as a reminder of the importance of robust security measures and monitoring against unauthorized access. Companies in the cybersecurity sector must remain vigilant to protect sensitive information and maintain their reputations.
Instructure, the company behind the Canvas learning management system, has confirmed a data breach that has exposed personal information of its users. The breach was disclosed on a Friday, and the hacker group ShinyHunters has claimed responsibility for the attack. While Instructure has not provided detailed information about the types of personal data compromised, the incident raises concerns about the security of educational platforms and the sensitive information they handle. Users of Canvas and potentially other Instructure services should remain vigilant and take steps to secure their accounts, as the exposure of personal data can lead to identity theft or further phishing attempts. This incident highlights the ongoing risks that educational institutions face in protecting their digital environments.
Trellix, a cybersecurity firm, recently reported a breach of its source code repository. Although the company is conducting a thorough investigation, they have not found any evidence that this incident has affected their source code release or distribution processes. This means that, at least for now, their products and services remain secure from any potential vulnerabilities that could arise from the breach. The implications of such a breach can be significant, as access to source code can provide attackers with insights that could be used to exploit systems or develop malicious software. Trellix is reassuring its clients that their security measures are intact, but the situation serves as a reminder of the ongoing risks associated with software development and source code management.
Trellix, a cybersecurity firm, has reported a data breach after attackers accessed part of its source code repository. The breach raises concerns about the security of the company's software and the potential exposure of sensitive information. While Trellix did not disclose the extent of the data accessed, incidents like this can lead to vulnerabilities in the software products they develop. This situation serves as a reminder for companies to regularly assess their security measures and safeguard their intellectual property. Customers and partners are advised to stay vigilant and monitor for any unusual activity related to Trellix products.
Instructure, an educational technology company, has confirmed that it suffered a data breach after a cyberattack. The ShinyHunters group, known for its extortion tactics, claims responsibility for the attack. Users of Instructure's platforms, which include tools like Canvas, may have had their personal data compromised. This incident raises concerns about the security of educational technologies and the potential risks to students and educators. As cyberattacks on educational institutions become more frequent, stakeholders need to ensure that proper security measures are in place to protect sensitive information.
In April 2026, Sistemi Informativi, an IBM Italy subsidiary responsible for IT infrastructure management for various public and private institutions, suffered a significant breach. This incident is believed to be linked to the Chinese cyber operation known as Salt Typhoon. The breach raises alarms about the vulnerability of European digital defenses, especially as it targets a company managing critical infrastructure. The attack underscores the ongoing risks posed by state-sponsored cyber activities and highlights the need for enhanced cybersecurity measures across Europe. Organizations that rely on Sistemi Informativi for IT services may face increased risks as a result of this incident, prompting a review of their security protocols and defenses.
Instructure, the developer of the Canvas learning platform, has reported a cybersecurity incident that has prompted an investigation into its potential impact. While details about the nature of the incident are still emerging, the company is assessing how it may affect users and systems. This incident is particularly concerning given Canvas's widespread use in educational institutions, where sensitive student and faculty data could be at risk. As the investigation continues, users are advised to stay alert for any updates and potential security measures that may be necessary to protect their information. The situation underscores the ongoing challenges that educational technology companies face in safeguarding their platforms against cyber threats.