The Canvas Breach: What K–12 Leaders Need To Know About Third-Party SaaS Risk

Cybercriminal group ShinyHunters has executed one of the largest educational data breaches on record, targeting Instructure, the company behind learning management system Canvas. Instructure detected unauthorized activity on April 29. On May 2, the company reported that it had “revoked privileged credentials and access…