THU 02 JUL 2026 · GMT EDITION A WHITESTONE INTELLIGENCE PUBLICATION
MARKETS · CYBER · MEMOS · MODELS
DAILY ISSUES26 MAY27 MAY28 MAY29 MAY30 MAY31 MAY01 JUN02 JUN03 JUN04 JUN05 JUN06 JUN07 JUN08 JUN09 JUN10 JUN11 JUN12 JUN13 JUN14 JUN15 JUN16 JUN17 JUN18 JUN19 JUN21 JUN22 JUN23 JUN24 JUN25 JUN26 JUN27 JUN28 JUN29 JUN30 JUN01 JUN02 JUNALL ›
FRONT PAGE / CYBER / CYB-2026-05-07-F1
CYBER · ransomware threat groups · 2026-05-07SCOOP 55

ShinyHunters linked to Instructure breach claimed to affect nearly 275 million Canvas users

Per Hindustan Times' May 7 report, the ShinyHunters group claimed responsibility for a cyberattack on Instructure, the company behind the Canvas learning platform used widely by schools, asserting impact on nearly 275 mi.

·FILED 2026-05-07·1 MIN READ·RE-VERIFIED 2026-07-02 UTC·✓ RE-VERIFIED 2026-07-02

At a glance

  • ShinyHunters claimed responsibility for a cyberattack on Instructure affecting nearly 275 million Canvas users, per Hindustan Times

VERDICT — CONFIRMED

pipeline-backfill confidence · primary + corroborating sources verified · re-verified 2026-07-02 UTC
Cyber desk illustration
Generated desk illustration · The Dossier Wire · not a photograph

Per Hindustan Times' May 7 report, the ShinyHunters group claimed responsibility for a cyberattack on Instructure, the company behind the Canvas learning platform used widely by schools, asserting impact on nearly 275 million users. The user figure is the attackers' claim as relayed by the outlet; the primary article could not be retrieved and no independent confirmation appears in the available material.

Key facts on file

  • ShinyHunters claimed responsibility for a cyberattack on Instructure affecting nearly 275 million Canvas users, per Hindustan Times

PRIMARY SOURCE

Hindustan Times
— (2026-05-07) · fetched at filing · archived at publication
Filed underBREACHHACKERS

Sources · two-source rule

PRIMARYHindustan Times— (2026-05-07)
Share
Filed by the Cyber desk · verified by the verification desk · re-verified 2026-07-02 · Our standards: the two-source rule ›
CITE THIS FILE — The Dossier Wire · cyb-2026-05-07-f1 · filed 2026-05-07 · https://thedwire.com/wire/cyb-2026-05-07-f1-shinyhunters-linked-to-instructure-breach-claimed-to-affect.html · Primary and corroborating sources listed above; archived at publication. Republishing & licensing: hello@thedwire.com.
More from Cyber FULL DESK ›
Cyber desk illustration
Generated desk illustration · not a photograph
CYBER · SCOOP 65

CERT-EU: critical PAN-OS flaw enables unauthenticated remote code execution as root, limited exploitation observed

CERT-EU's May 6 advisory (2026-006) flags a critical vulnerability in Palo Alto Networks PAN-OS, disclosed the same day in a Palo Alto security advisory, that allows an unauthenticated attacker to execute arbitrary code with root privileges. Per the advisory, Palo Alto has observed limited exploitation in the wild. CERT-EU strongly recomm

✓ verifiednewSOURCE ↗
READ THE FILE ›
DOJ Case Says Karakurt Ransomware Gang Leveraged Russian Government Databases; L
TechCrunch
CYBER · SCOOP 62

DOJ Case Says Karakurt Ransomware Gang Leveraged Russian Government Databases; Latvian Operative Gets 102 Months

The U.S. Department of Justice detailed a case alleging that the Karakurt ransomware gang—also operating as TommyLeaks and SchoolBoys—relied on access to Russian government databases and law-enforcement connections to intimidate victims, underscoring ties between Russian cybercriminals and the state. Latvian national Deniss Zolotarjovs, w

✓ verified
READ THE FILE ›
Cyber desk illustration
Generated desk illustration · not a photograph
CYBER · SCOOP 60

Cisco Unity Connection flaws CVE-2026-20034 and CVE-2026-20035 allow remote code execution and SSRF

Cisco's May 6 PSIRT advisory discloses multiple vulnerabilities in Unity Connection, tracked as CVE-2026-20034 and CVE-2026-20035, that could let a remote attacker execute arbitrary code on an affected device or conduct server-side request forgery attacks through it. Cisco has released software updates and rates the security impact High;

✓ verifiednewSOURCE ↗
READ THE FILE ›

The morning wire in your inbox — every brief, primary sources linked, no noise.

Free tier. The Wire — continuous desk briefs · Records archive · Bureau alerts.

Stored to the wire's subscriber list. No spam, unsubscribe any time.