Recent Breaches

Recent BreachesCompanies › Instructure

Company breach profile

Instructure: Breach History & DoxxScan™ Rating

Instructure has 3 publicly reported breaches in our tracker. Here is the timeline, what was exposed, and its DoxxScan™ Rating.

84/100
Low doxx risk

DoxxScan™ Rating — lower means a higher likelihood that personal data tied to this company is exposed and could be used to dox or target its customers.

powered by GalaxyWarden
Is your data from Instructure exposed?
Scan your email against every breach we track — free, 30 seconds.
Check if you’re exposed →

Breach timeline

May 12, 2026HIGHInstructure Pays Ransom to ShinyHunters to Prevent Canvas Data Leak
ShinyHuntersRansomware
+2 reports

Data reported exposed

Across these incidents, the data reported as exposed includes: names, email-addresses, student-ids, private-messages, enrollment-data.

Groups involved

ShinyHunters 1

Methods used

Misconfiguration & Exposed Data 1Ransomware 1Data Extortion & Leaks 1

The DoxxScan™ Rating is an automated, informational estimate of how exposed a company’s customers may be, derived solely from publicly reported breach history — the number of incidents, how recent and severe they were, and the sensitivity of the data involved. A lower rating indicates a higher likelihood that personal information tied to this company is circulating and could be used to dox or target individuals. It is not an audit, certification, or assessment of the company’s current security controls, and it does not represent present-day risk. It may rely on incomplete or unverified public reports and can change as new information emerges. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company named here. Provided for general awareness only — not legal, financial, or security advice. How the rating is calculated →