News Summary

• TechCrunch saw a message published by the cybercrime group ShinyHunters on the Canvas login pages of three separate schools.
• A review of the defaced portals shows that the hackers injected an HTML file that altered the login screens to display their message.
• The message says the hackers will publish the stolen data on May 12 if the company does not “negotiate a settlement.” At the time of writing, Instructure’s website appeared to be partially online, at times returning a “too many requests” error.